CYBERHAWK / CVE / CVE-2026-39987
CVE-2026-39987
Marimo
ACTIVELY EXPLOITED (KEV)
ai
The flaw
Pre-auth remote code execution allows unauthenticated shell access
What to do
Update immediately if running Marimo in production
References
In the news
- Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of DisclosureThe Hacker News · 2026-04-10
- CVE-2026-39987: Marimo RCE exploited in hours after disclosureSecurity Affairs · 2026-04-11
- Critical Marimo Python Notebook RCE Vulnerability (CVE-2026-39987) Exploited Within 10 Hours of DisclosureRescana · 2026-04-01