Firetruck

CVE-2026-39987

KEV
Updated Apr 24, 2026 · PUBLISHED
View KEV entry →

Description

Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell access and execute arbitrary system commands.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
marimomarimo-team / marimo< 0.23.0affected