# Marimo RCE via CVE-2024-41663 Exploited to Deliver NKAbuse Malware

> Attackers are exploiting a critical RCE in Marimo Python notebooks (CVE-2024-41663) to deploy NKAbuse malware via Hugging Face. Update to version 0.7.5.

- Published: 2026-04-16T20:21:05.000Z
- Severity: high
- Category: Malware
- Tags: CVE-2024-41663, NKAbuse, Marimo, Hugging Face, Python
- Author: Runtime Rebel Intel
- Primary source: https://www.bleepingcomputer.com/news/security/hackers-exploit-marimo-flaw-to-deploy-nkabuse-malware-from-hugging-face/
- Canonical: https://runtimerebel.com/blog/marimo-rce-via-cve-2024-41663-exploited-to-deliver-nkabuse-malware

## Key points

- Immediate impact: Attackers gain remote code execution to deploy the NKAbuse backdoor and facilitate distributed denial of service attacks.
- Affected systems: Python developers using Marimo reactive notebooks on versions prior to 0.7.5 are at risk.
- Remediation: Organizations must update Marimo installations to version 0.7.5 or later and implement strict egress filtering.

Threat actors are actively targeting the AI and data science community by exploiting a critical vulnerability in Marimo, a popular reactive Python notebook. According to [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-exploit-marimo-flaw-to-deploy-nkabuse-malware-from-hugging-face/), these attackers are utilizing the flaw to deploy a variant of the NKAbuse malware, leveraging Hugging Face as a trusted hosting platform for the malicious binaries.

## Overview of the Marimo RCE Exploit

The vulnerability, identified as [CVE-2024-41663](https://nvd.nist.gov/vuln/detail/CVE-2024-41663), resides in Marimo versions prior to 0.7.5. Marimo is designed as a reactive notebook where code execution is automatically managed based on state changes. However, the lack of proper input validation in certain components allowed for an unauthenticated [RCE](/glossary#rce). 

Security researchers at Protect AI originally discovered the [CVE](/glossary#cve), noting that the exploit allows an attacker to execute arbitrary system commands with the privileges of the user running the notebook server. Because data science environments often lack the rigorous [EDR](/glossary#edr) coverage found in enterprise workstations, they represent a high-value target for [Lateral Movement](/glossary#lateral-movement) and data exfiltration.

## Technical Analysis of NKAbuse Malware

Once the exploit is successful, attackers initiate a command to download the NKAbuse malware. The specific campaign observed involves **NKAbuse malware Hugging Face delivery**, where the binary is fetched from a Hugging Face Space. This tactic is particularly effective because many organizations allow traffic to and from Hugging Face by default, assuming it is legitimate machine learning research data.

NKAbuse is a sophisticated backdoor and [DDoS](/glossary#ddos) bot written in Go. It is notable for using the NAIX protocol, which is built on the Libp2p framework. This allows the malware to maintain a decentralized [C2](/glossary#c2) infrastructure, making it resilient against traditional IP-based blocking or domain takeovers. 

Capabilities of NKAbuse include:
*   Full system [backdoor](/glossary#backdoor) functionality.
*   Execution of various [DDoS](/glossary#ddos) attack vectors (TCP, UDP, and HTTP floods).
*   Remote screen capture and keylogging.
*   Management of file systems on the infected host.

## Detection and Mitigation Strategies

Defenders must prioritize identifying and patching vulnerable instances of the Marimo server. Use the following guidance to secure your environment and understand **how to patch Marimo RCE** vulnerabilities effectively.

### Marimo CVE-2024-41663 exploit detection

Security Operations Centers ([SOC](/glossary#soc)) should monitor for unusual child processes spawning from Python notebook instances. Specifically, look for `curl` or `wget` commands fetching binaries from Hugging Face (`huggingface.co/spaces/...`). [SIEM](/glossary#siem) rules should be configured to flag execution of ELF files from temporary directories such as `/tmp/` or `/dev/shm/`, which are common [IoC](/glossary#ioc) patterns for this campaign.

To map these threats to the [MITRE ATT&CK](/glossary#mitre-att-ck) framework, the exploitation of Marimo falls under T1190 (Exploit Public-Facing Application), while the use of Hugging Face for delivery aligns with T1105 (Ingress Tool Transfer).

### Actionable Recommendations

1.  **Immediate Patching**: Update all Marimo installations to version 0.7.5 or higher. This version addresses the underlying flaws that lead to command injection.
2.  **Network Segmentation**: Restrict access to the Marimo notebook interface using a VPN or firewall. It should never be exposed directly to the public internet.
3.  **Egress Filtering**: Implement strict egress controls on compute instances used for AI/ML. Restrict the ability to fetch external binaries unless through an approved internal proxy.
4.  **Runtime Monitoring**: Deploy runtime security tools capable of detecting unauthorized system calls and network connections originating from Python environments.

**Related:** [Marimo RCE via CVE-2024-52271 — Active Exploitation Mitigation Guide](/blog/marimo-rce-via-cve-2024-52271-active-exploitation-mitigation-guide), [AI-Generated Slopoly Malware Linked to Interlock Ransomware Attacks](/blog/ai-generated-slopoly-malware-linked-to-interlock-ransomware-attacks)

---

AI-generated analysis from the primary source above; not human-reviewed before publication — verify anything operational against the original (https://runtimerebel.com/editorial). Quote with attribution and a link to the canonical URL: https://runtimerebel.com/blog/marimo-rce-via-cve-2024-41663-exploited-to-deliver-nkabuse-malware