🛡️ CVE-2026-39987

The items that name it 6

• [tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards
  article2026-09-17It is written here as CVE-2026-39987 (marimo unauthenticated /terminal/ws endpoint exploited by a hand-coded Python attacker, Sysdig Threat Research Team).

  marimo unauthenticated /terminal/ws endpoint exploited by a hand-coded Python attacker, Sysdig Threat Research Team

• Machine speed, hold the AI: hand-rolled marimo CVE-2026-39987 exploit
  writeup2026-09-11

  Pre-authentication remote code execution (RCE) vulnerability in marimo. The /terminal/ws WebSocket endpoint provides an interactive PTY shell but skips the authentication validation applied by other WebSocket endpoints, granting any client a full interactive shell as the marimo process user with no

• Rumour Is the Exploit — AI agents collapse time-to-exploit to near-zero
  article2026-08-22It is written here as CVE-2026-39987 (marimo; advisory to first exploitation attempt in 9 hours, with no public proof-of-concept).

  marimo; advisory to first exploitation attempt in 9 hours, with no public proof-of-concept

• N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it
  writeup2026-08-20It is written here as CVE-2026-39987: Marimo unauthenticated terminal WebSocket, versions before 0.23.0, in CISA Known Exploited Vulnerabilities catalog.
• Marimo OSS Python Notebook RCE: From Disclosure to Exploitation in Under 10 Hours | Sysdig
  writeup2026-04-09

  Pre-authentication remote code execution vulnerability in the /terminal/ws WebSocket endpoint of marimo, affecting versions 0.20.4 and earlier; CVSS v4.0: 9.3 (Critical); advisory GHSA-2679-6mx9-h9xc; allows full interactive shell without credentials via a single WebSocket connection.

• Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
  article

  Earlier Marimo flaw: missing authentication validation on the /terminal/ws endpoint in versions 0.20.4 and earlier; requests reaching the endpoint could obtain a full pseudo-terminal (PTY) shell and execute arbitrary commands. Patched in version 0.23.0. Source: Marimo's advisory.