Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

Marimo's notebook software had a high-severity security flaw that could allow an attacker to execute a malicious Model Context Protocol command. This command could run as a local subprocess when a specially crafted notebook is opened in edit mode. The vulnerability was addressed by Marimo, as noted in a record by VulnCheck's CVE Numbering Authority. The flaw enabled an attacker to run commands before cells are executed in edit mode.