Marimo patches high-severity code injection vulnerability

Marimo has addressed a high-severity security vulnerability in its notebook software that allows for code injection. The flaw, tracked as CVE-2026-75149, enables an attacker to execute a supplied Model Context Protocol (MCP) command as a local subprocess when a specially crafted notebook is opened in edit mode.

The vulnerability affects versions prior to 0.23.15. According to VulnCheck’s CVE Numbering Authority, the issue carries a CVSS v3.1 score of 8.8 and a CVSS v4 score of 8.7. While user interaction is required to trigger the flaw, no attacker authentication is necessary.

To mitigate the risk, Marimo released version 0.23.15, which includes a hardening patch that treats notebook metadata as attacker-controlled and utilizes an allowlist for notebook-supplied configurations. Users are encouraged to update to the latest stable release, such as version 0.24.0, to ensure protection.