Skip to content
OpenAdvisories

Vendor

marimo-team

4 known vulnerabilities.

Products

marimo 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-75149

    marimo < 0.23.15 Code Injection via MCP Server Configuration

    marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. W…

    marimo-team marimo