CyberRota Analysis
AI-GeneratedThe vulnerability in marimo prior to version 0.23.15 allows attackers to execute arbitrary commands through a crafted MCP server entry in the notebook configuration handler. This can be triggered without authentication or the need to execute any notebook cells, posing a significant risk to systems using affected versions. Organizations utilizing marimo for notebook management should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mode, marimo launches the specified command as a local subprocess before any notebook cell is executed, requiring no authentication or cell execution to trigger the vulnerability.