CERT24Critical Marimo pre-authentication remote code execution flaw under active exploitationLoading data…
CERT24Threat Observatory
Period

Critical Marimo pre-authentication remote code execution flaw under active exploitation

The critical vulnerability CVE-2026-39987 in the open-source Marimo reactive Python notebook platform came under active exploitation less than 10 hours after public disclosure. The flaw affects Marimo versions 0.20.4 and earlier and allows unauthenticated remote code execution.

← Back to intelligence

Critical Marimo pre-authentication remote code execution flaw under active exploitation

The critical vulnerability CVE-2026-39987 in the open-source Marimo reactive Python notebook platform came under active exploitation less than 10 hours after public disclosure. The flaw affects Marimo versions 0.20.4 and earlier and allows unauthenticated remote code execution.