Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Marimo notebook software MCP command code injection security flaw (CVE-2026-75149)

Vulnerability
First reported
Last updated
Happening score
H score 30
1 unique sources, 1 articles

Summary

Hide ▲

A code injection flaw in Marimo notebook software lets a specially crafted notebook run an attacker-supplied MCP command as a local subprocess when opened in edit mode, exposing versions prior to 0.23.15. The vulnerability is tracked as CVE-2026-75149 and carries CVSS v4 8.7 and CVSS v3.1 8.8 scores. Marimo fixed the issue in 0.23.15, and users on affected releases should upgrade.

Timeline

  1. 25.08.2026 15:43 2 articles · 2h ago

    Marimo 0.23.15 blocks attacker-supplied MCP commands in notebook edit mode

    Mitigation Patch Update

    Marimo released version 0.23.15 to address CVE-2026-75149, a code injection flaw in its notebook software where a specially crafted notebook opened in edit mode could launch an attacker-supplied Model Context Protocol (MCP) command as a local subprocess. The hardening patch treats notebook metadata as attacker-controlled and removes ai, mcp, completion, secrets, and server configuration sections.

    Show sources
    Open in new tab
  2. 19.08.2026 03:00 1 articles · 6d ago

    VulnCheck publishes CVE-2026-75149 for Marimo notebook code injection

    Initial Disclosure

    VulnCheck's CNA record published CVE-2026-75149 on August 19, describing a high-severity Marimo notebook code injection issue affecting versions prior to 0.23.15. The record says a crafted notebook opened in edit mode can run an attacker-supplied MCP command as a local subprocess before any notebook cell is executed.

    Show sources
    Open in new tab