AIKIDO-2026-475963

TL;DR

The Livebook Teams identity callback exchanges an authorization code for a token and writes it into the browser session without any state or nonce binding to the session that started the login. A member of the same Livebook Teams organization can begin a login flow, retain the code, and induce another user to open a URL carrying it, completing authentication under the initiator's identity. The victim then works in a session attributed to another account, exposing secrets, uploads, and notebook results. The fix binds the callback to the initiating session with state validation.