#marimo

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

Sep 15, 2026 // 15:01

With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig […]

Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

Aug 25, 2026 // 15:48

Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol (MCP) command in […]

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit

May 29, 2026 // 17:49

An unknown threat actor has been observed using a large language model (LLM) agent to conduct post-compromise actions after obtaining initial access following the exploitation […]

Hackers exploit Marimo flaw to deploy NKAbuse malware from Hugging Face

Apr 16, 2026 // 20:17

Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware hosted on Hugging Face Spaces. Attacks leveraging […]

Critical flaw in Marimo, allowing remote code execution before authentication, is now being actively exploited in the wild.

Apr 12, 2026 // 17:37

A serious security issue in the Marimo Python notebook platform was quickly taken advantage of by hackers, starting only 10 hours after the vulnerability was […]

Marimo RCE (CVE-2026-39987) exploited in under 10 hours after vulnerability revealed.

Apr 10, 2026 // 13:42

A serious security flaw in Marimo, a free and open Python tool for data work, was targeted just 10 hours after it was revealed publicly, […]