CVE-2026-39987
Apr 9, 2026
marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticate...
Read Advisory
1 advisories affecting Coreweave Marimo
1
Total CVEs
1
Critical
0
High