2026年8月25日 8:43 ET 发布 · 更新于 3 个月前 · 1 个来源
Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
The Hacker News
·
原始报道
Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol (MCP) command in a specially crafted notebook, according to VulnCheck's CVE Numbering Authority (CNA) record. The CNA record says the command can run as a local subprocess when the notebook is opened in edit mode. The vulnerability, tracked
原文