Read the docs
TI-2026-52802 Aliases CVE-2026-75149GHSA-gfgh-xp6v-q37q

marimo < 0.23.15 Code Injection via MCP Server Configuration

Priority MEDIUM 42CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.

Summary

marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mode, marimo launches the specified command as a local subprocess before any notebook cell is executed, requiring no authentication or cell execution to trigger the vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00962 61st percentileScored 2026-11-07
Fix Fixed marimo (marimo-team): 0.23.15

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
marimo-teammarimobefore 0.23.150.23.15Patch availableCNA
  • marimo Vendormarimo-team Affected before 0.23.15 Fixed in 0.23.15 Patch available CNA

Remediation

  • Fix · CNA marimo (marimo-team) Fixed in 0.23.15

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-75149
  2. 2026-10-03 Alias added: GHSA-gfgh-xp6v-q37q

References

Patch 1

Other 2

  • TI-2026-47772 marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata CVSS 4.0HIGH 7.1
  • TI-2026-39264 marimo < 0.23.9 XSS via file Query Parameter in assets.py CVSS 4.0MEDIUM 5.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences