TI-2026-28840 CVE-2026-39987 · GHSA-2679-6mx9-h9xc
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
Priority CRITICAL 99KEV
marimo is a reactive Python notebook.
Coreweave
Records1All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Coreweave records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
1 record in Marimo · all components