Marimo Notebook Flaw: A Wake-Up Call for Open Source Security

Marimo, a popular open-source notebook software, recently addressed a high-severity security flaw that could allow attackers to execute arbitrary commands on a user's system. This vulnerability, tracked as CVE-2026-75149, affects versions of Marimo prior to 0.23.15. The flaw stems from a code injection issue that allows an attacker to run an attacker-supplied Model Context Protocol (MCP) command in a specially crafted notebook. This can happen when the notebook is opened in edit mode, and the command is executed as a local subprocess before any notebook cell is executed.

The vulnerability has a CVSS v4 score of 8.7 and a CVSS v3.1 score of 8.8, indicating a significant risk. Marimo has released a patch in version 0.23.15 to address this issue. Users running affected versions of Marimo are advised to upgrade to a version outside the affected range to mitigate the risk.

This vulnerability highlights the importance of keeping software up to date and being cautious about the notebooks and configurations used. The issue was discovered by Gregory Tan, who also contributed to the patch. This incident serves as a reminder of the potential risks associated with open-source software and the importance of continuous security monitoring and updates.

As the use of AI and machine learning tools continues to grow, ensuring the security of these tools becomes increasingly important. This incident underscores the need for developers and users to remain vigilant and proactive in addressing security vulnerabilities in the software they use.