Skip to content
OpenAdvisories

Vendor

marimo-team

4 known vulnerabilities.

Products

marimo 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-39987 Exploited Public exploit EPSS 100%

    marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

    marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary…

    marimo-team marimo marimo PyPI
    KEV Apr 23, 2026