A critical code injection vulnerability in marimo allows remote attackers to achieve arbitrary code execution through crafted configuration files.

This is a code injection vulnerability (CWE-94) that allows for the execution of arbitrary code. It is triggered when the application processes a specially crafted MCP server configuration, potentially leading to a full compromise of the host environment.

The CVSS score of 8.8 underscores the severity of this remote code execution flaw. Successful exploitation could result in a complete system compromise, allowing an attacker to steal sensitive data, install persistent malware, or pivot into the internal network.

Immediate Action: Upgrade marimo to version 0.23.15 or later immediately to patch the configuration parsing mechanism.

Proactive Monitoring: Monitor server processes for unexpected child processes or unusual file system modifications originating from the marimo application user.

Compensating Controls: Ensure that marimo instances are run in isolated environments or containers with limited privileges to minimize the impact of a potential code execution event.

Public Exploit Available: Unknown.

This vulnerability represents a significant risk of remote code execution. It is imperative that all deployments of marimo are updated to version 0.23.15 without delay to eliminate the risk of arbitrary code execution via malicious configuration.