CVE-2026-68746

Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces identity through Livebook Teams. A Livebook Agent or App Server connected to Livebook Teams caches the identifier of the deployment group it belongs to, and resolves that identifier against a locally cached list of deployment groups on every request in order to decide whether Teams identity enforcement is active. Livebook.Hubs.TeamClient.handle_call/3 in lib/livebook/hubs/team_client.ex does not distinguish a deployment group that could not be resolved from one that was resolved with identity enforcement switched off: the clause matches only the case where a group was found with enforcement enabled, and falls through to a catch-all that reports enforcement as switched off for everything else. The two neighbouring functions that decide user and application access resolve the same identifier and treat the same unresolved result as a denial. When the identity status is reported as switched off, Livebook.ZTA.LivebookTeams.authenticate/3 in lib/livebook/zta/livebook_teams.ex returns empty identity metadata and allows the request to continue instead of halting it. LivebookWeb.UserPlug.build_current_user/3 merges that empty metadata into a newly built user, whose access type defaults to full access, and LivebookWeb.AuthPlug.authorized?/1 grants access to any user holding full access. The cached identifier becomes unresolvable when the deployment group it refers to is deleted while the agent is not connected to receive the change, most concretely when a deployment group is deleted during the window in which an agent is disconnected or reconnecting. The client removes the group from its cached list without clearing the identifier that refers to it. Any client able to reach the affected server over the network is then granted the same access as a fully privileged member of the organisation, including the ability to read notebooks and configured secrets, execute code on the server's runtime, and disrupt its operation. This issue affects livebook: from 0.19.7 before 0.19.9.

• CWE-636

• https://cna.erlef.org/cves/CVE-2026-68746.htmlVendor Advisory
• https://github.com/livebook-dev/livebook/commit/2d3a2c710c880abd24a2bc888d3cf5239d98cf72Patch
• https://github.com/livebook-dev/livebook/commit/d374e90647edbb00286bfee9182c0161d29a8e07Patch
• https://github.com/livebook-dev/livebook/commit/d6d0dfa746b172540442852f74de4a9deacc433bPatch
• https://github.com/livebook-dev/livebook/security/advisories/GHSA-74j5-6grg-g6wjVendor Advisory
• https://osv.dev/vulnerability/EEF-CVE-2026-68746Third Party Advisory

Published

Aug 5, 2026

Last Modified

Aug 10, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6872Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-6873An issue was discovered in Django 6.0 before 6.0.6 and 5.2 b…4.3
• CVE-2026-6874A vulnerability was determined in ericc-ch copilot-api up to…4.3
• CVE-2026-68742A flaw was found in SSSD. The sss_nss_protocol_parse_addr() …5.5
• CVE-2026-68743A flaw was found in SSSD. The extract_authtok_v1() function …5.5
• CVE-2026-68744A flaw was found in SSSD. The sss_nss_protocol_fill_initgr()…3.3
• CVE-2026-68747Improper Neutralization of Special Elements in Output Used b…6.1
• CVE-2026-68749Inefficient Regular Expression Complexity vulnerability in t…7.5
• CVE-2026-6875ServiceNow has addressed a remote code execution vulnerabili…9.5
• CVE-2026-68750Inefficient Algorithmic Complexity vulnerability in the trav…7.5
• CVE-2026-68752A Project Resource Manager may gain broader administrative p…7.2
• CVE-2026-68753An unauthenticated user may access restricted Artifactory co…5.3