Skip to content
OpenAdvisories

Vendor

marimo-team

4 known vulnerabilities.

marimo-team at a glance

Last 12 months
4
Critical · all time
1
Exploited · all time
1
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 1 vulnerability, 1 critical May 2026: 0 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 0 vulnerabilities August 2026: 2 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202620
Jul 202600
Jun 202610
May 202600
Apr 202611
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

marimo 4
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.8
    CVE-2026-75149

    marimo < 0.23.15 Code Injection via MCP Server Configuration

    marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. W…

    marimo-team marimo
  • Medium 6.5
    CVE-2026-67618

    marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata

    marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltrate operator API keys by embedding a malicious base_url in PEP-723 inline script metadata, which is merged into session configuration with higher pre…

    marimo-team marimo
  • Medium 6.1
    CVE-2026-54386

    marimo < 0.23.9 XSS via file Query Parameter in assets.py

    marimo before 0.23.9 contains a reflected cross-site scripting vulnerability in the notebook page that allows unauthenticated attackers to inject arbitrary JavaScript by exploiting improper escaping of single quotes in the file query parameter reflected into …

    marimo-team marimo marimo PyPI
  • Critical 9.3
    CVE-2026-39987 Exploited Public exploit EPSS 100%

    marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

    marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary…

    marimo-team marimo marimo PyPI
    KEV Apr 23, 2026