Livebook generates deployment setup commands that incorporate environment variable values directly into shell commands. Because these values are not shell escaped, an attacker who can set deployment group environment variables can inject shell syntax such as $(…) or backticks. The resulting command, when copied and executed by a user, runs on that user’s machine under the user’s privileges, providing arbitrary command execution. The vulnerability is a classic operating‑system command injection (CWE‑78).

The flaw affects Livebook by livebook‑dev. All releases from 0.13.0 up to but excluding 0.18.7, and from 0.19.0 up to but excluding 0.19.9 are vulnerable. Versions 0.18.7 and 0.19.9 or later contain the fix.

The CVSS score of 5 indicates a moderate severity. EPSS data is not available, and the vulnerability is not listed in CISA’s KEV catalog. The attack requires privileged modification of deployment group environment variables, but the impact occurs on any workstation that executes the displayed command. If an attacker writes a malicious value and a user copies the generated command into a terminal, the victim’s account can run arbitrary Linux commands.