CVE-2026-39987: Marimo Remote Code Execution Vulnerability

Added to the CISA Known Exploited Vulnerabilities catalog on 23 Apr 2026. Vendor: Marimo. Product: Marimo.

Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell access and execute arbitrary system commands.

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. (due 07 May 2026)