🧰 marimo

The items that name it 8

• [tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards
  articleas affected products2026-09-17It is written here as marimo (notebook).

  notebook

• Machine speed, hold the AI: hand-rolled marimo CVE-2026-39987 exploit
  writeupas affected products2026-09-11

  Python notebook application commonly deployed alongside ML pipelines on hosts with GPU access, large datasets, and credentialed connections to AWS, GCP, and model providers. The /terminal/ws WebSocket endpoint was vulnerable to pre-authentication RCE (CVE-2026-39987).

• Inside 90 days of attacks on AI infrastructure
  writeupas affected products2026-08-27

  AI tool noted as shipping unauthenticated by default.

• Rumour Is the Exploit — AI agents collapse time-to-exploit to near-zero
  articleas affected products2026-08-22It is written here as marimo (CVE-2026-39987).

  CVE-2026-39987

• N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it
  writeupas affected products2026-08-20It is written here as Marimo (versions before 0.23.0).

  versions before 0.23.0

• [tl;dr sec] #340 - Anthropic and Meta Agents be Hackin', Agentic Incident Response Notebooks, Figma's AI Code Scanning
  articleas tools2026-08-07

  Python notebook system used as an incident response workspace, shared live view, web app and agent interface (via marimo-pair).

• Marimo OSS Python Notebook RCE: From Disclosure to Exploitation in Under 10 Hours | Sysdig
  writeupas affected products2026-04-09

  Open-source reactive Python notebook platform; /terminal/ws WebSocket endpoint lacks authentication validation (unlike other endpoints such as /ws which call validate_auth()), granting a full interactive PTY shell with the privileges of the marimo process. Fixed in version 0.23.0 via PR #9098.

• Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
  articleas tools

  Notebook software (Python) that can run edit-mode notebooks and MCP server commands