Marimo Notebook Flaw Enables MCP Subprocess Execution on Open

Wed, 26 Aug 2026 11:42:13 +0000

Engineer — Plan: Teams using Marimo in AI/ML workflows should update to the patched version; the attack surface (opening a crafted notebook in edit mode triggers a local subprocess via MCP) is a real supply-chain-style risk, but no KEV listing, public PoC, or active exploitation signals mean this isn’t an emergency patch.
SOC/IR — Skip
Leader — Skip

Notebook-Vulnerability on CuraSec