Skip to content
Threat Feed
Subscribe

Vendor

Marimo

6 briefs RSS
high advisory

Remote Code Execution in Marimo 0.20.4

A Remote Code Execution vulnerability in Marimo version 0.20.4 allows attackers to achieve arbitrary command execution via a publicly available exploit.

Marimo webapps rce vulnerability
2t
high advisory

Remote Code Injection Vulnerability in marimo

Marimo versions before 0.23.15 contain a command injection vulnerability in the notebook configuration handler, allowing arbitrary command execution when a malicious notebook is opened in edit mode.

marimo
1t 1c
critical advisory

Marimo Pre-Authentication Remote Code Execution Vulnerability (CVE-2026-39987)

CVE-2026-39987 is a pre-authentication remote code execution vulnerability in Marimo, enabling unauthenticated attackers to execute arbitrary system commands.

Marimo CVE-2026-39987 rce vulnerability
2r 1t 1c
critical threat

Citrix NetScaler ADC and Gateway CVE-2026-3055 Exploitation

Threat actors are actively exploiting CVE-2026-3055, a critical memory overread vulnerability in Citrix NetScaler ADC and NetScaler Gateway appliances configured as a SAML identity provider (IDP), to extract sensitive information, including authenticated administrative session IDs, potentially leading to full system takeover.

PoC Langflow +4 citrix netscaler cve-2026-3055 memory-overread information-disclosure
2r 3t 5c 1i updated
critical threat

Critical RCE Vulnerability in Langflow AI Pipelines (CVE-2026-33017)

A critical remote code execution vulnerability, CVE-2026-33017, exists in Langflow AI pipelines prior to version 1.9.0 that allows an unauthenticated remote attacker to execute code with full server process privileges, impacting availability, integrity, and confidentiality.

exploited PoC Siyuan +6 langflow rce cve-2026-33017 ai-pipeline
2r 2t 1c 1i updated
critical advisory

Marimo Pre-Auth RCE via Terminal WebSocket Authentication Bypass

Marimo versions 0.20.4 and earlier contain a pre-authentication remote code execution vulnerability in the `/terminal/ws` WebSocket endpoint, allowing unauthenticated attackers to execute arbitrary system commands, resulting in a full interactive root shell.

Marimo rce websocket
1r 1t