CVE-2026-39987

Marimo Marimo Vulnerability

Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell access and execute arbitrary system commands.

CVSS Score

9.8

CRITICAL

Published

23 Apr 2026 00:00

Modified

N/A

Vendor

Marimo

Product

Marimo

Source

CIRCL

Affected Versions

Fix Vendor Patch / Mitigation Available

Weaknesses (CWE)

CWE-306

Affected Systems

Marimo

External Links

NVD Database CIRCL CISA KEV

KEV Status

Known Exploited Vulnerability