marimo vulnerabilities

2 known vulnerabilities in marimo from Marimo-team. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  marimo: Improper Control of Generation of Code

  CVE-2026-75149Aug 19, 2026Marimo-team

  marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. Wh

• 9.8 Critical severity

  Marimo Remote Code Execution Exploited

  CVE-2026-39987Apr 9, 2026Marimo-teamEPSS 99.7%

  marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary