CVE-2023-35174 Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows

Livebook is a web application for writing interactive and collaborative code notebooks. On Windows, it is possible to open a livebook:// link from a browser which opens Livebook Desktop and triggers arbitrary code execution on victim's machine. Any user using Livebook Desktop on Windows is...

CVE-2023-35174

CVE-2023-35174 affects Livebook Desktop on Windows, where opening a browser-triggered livebook:// link can execute arbitrary code on the victim’s machine. The root cause is the protocol handler invocation from the browser, enabling code execution when users expect Livebook to open. Impact is arbi...