Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

A high-severity vulnerability (CVE-2026-75149) in Marimo notebook software allows an attacker to execute arbitrary commands by crafting a malicious notebook file. The vulnerability is addressed in version 0.23.15 and requires user interaction to exploit.