Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

Marimo has patched a high-severity flaw in its notebook software that allowed attackers to execute a supplied Model Context Protocol (MCP) command in a crafted notebook. According to VulnCheck's CNA record, the command runs as a local subprocess when the notebook is opened in edit mode. The vulnerability is tracked and has been addressed.