marimo-proxy-abuse: Marimo > 0.9.20 - Proxy Abuse

id: marimo-proxy-abuse

info:
  name: Marimo > 0.9.20 - Proxy Abuse
  author: ritikchaddha
  severity: medium
  description: |
    The /mpl/<port>/<route> endpoint, which is accessible without authentication on default Marimo installations allows for external attackers to reach internal services and arbitrary ports.
  impact: |
    This vulnerability, as it can be used to bypass firewalls and access internal services that are intended to be local-only. The level of impact depends entirely on what services are running and accessible on the local machine.
  remediation: |
    Upgrade to Marimo version 0.16.4 or later which adds authentication validation to the
  reference:
    - https://github.com/marimo-team/marimo/security/advisories/GHSA-xjv7-6w92-42r7
    - https://github.com/marimo-team/marimo
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
    cvss-score: 6.5
    cwe-id: CWE-400
  metadata:
    verified: true
    max-request: 1
    vendor: marimo-team
    product: marimo
    shodan-query: http.favicon.hash:-1864630356
  tags: cve,cve2026,marimo,proxy-abuse

http:
  - raw:
      - |
        GET /mpl/1234 HTTP/1.1
        Host: {{Hostname}}

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'Connection refused"}'
          - 'detail":'
        condition: and

      - type: word
        part: content_type
        words:
          - 'application/json'

      - type: status
        status:
          - 500
# digest: 4a0a00473045022100932b9823f1892e37b4b8a4d63afb58be83e2be3e12980a9b99c35f79875c8f0402205d9fe23944340399cb2fdb563d0d207110613837128dba07b4b5eae551ca64ef:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.