CVE-2026-75149
Received Received - Intake

Code Injection in Marimo Notebook Configuration

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: VulnCheck

Description
marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mode, marimo launches the specified command as a local subprocess before any notebook cell is executed, requiring no authentication or cell execution to trigger the vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-75149
EUVD
EUVD-2026-62665

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
marimo marimo to 0.23.15 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a code injection vulnerability in marimo versions before 0.23.15. Attackers can execute arbitrary commands by providing a malicious MCP server entry with an embedded command in a notebook. When the notebook is opened in edit mode, marimo launches the attacker-controlled command as a local subprocess without requiring authentication or cell execution.

Detection Guidance

Check marimo versions prior to 0.23.15 by running 'pip show marimo' or inspecting your environment. Look for suspicious MCP server configurations in notebook files or metadata. Monitor for unexpected subprocess launches when opening notebooks in edit mode.

Impact Analysis

An attacker could gain control of your system by tricking you into opening a malicious notebook. This could lead to unauthorized command execution, data theft, or further compromise of your environment. The attack requires no authentication and works simply by opening the notebook in edit mode.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's security requirements for protected health information. Organizations using affected marimo versions may face compliance violations if exploited.

Mitigation Strategies

Upgrade marimo to version 0.23.15 or later immediately. Review and remove any untrusted MCP server entries in notebook configurations. Avoid opening untrusted notebooks in edit mode until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75149. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart