Actively exploited vulnerabilities affecting Marimo products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-39987https://wildfortech.com/security#CVE-2026-39987This vulnerability in Marimo allows an unauthenticated attacker to execute arbitrary system commands without any prior login or credentials — a pre-authorization remote code execution flaw. In practice, this means anyone who can reach a Marimo instance over the network could gain shell-level control of the underlying system, potentially leading to full server compromise, data exfiltration, or use as a foothold for further attacks. No user interaction or account is required, making this especially dangerous for internet-exposed deployments.Thu, 23 Apr 2026 00:00:00 GMTMarimoMarimo