THREATOPS

THREAT OPS › CVEs › CVE-2026-39987

CVE-2026-39987 — Marimo Remote Code Execution Vulnerability

CISA KEVExploited: confirmedMarimo

Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell access and execute arbitrary system commands.

Vulnerability details

Affected productsMarimo
KEV remediation due2026-05-07

Related reporting

[CISA KEV] CVE-2026-39987 — Marimo Marimo: Marimo Remote Code Execution Vulnerabilitycisa_kev
April 2026 CVE Landscaperecordedfuture