⤷ Title: Marimo Pre-Auth RCE (CVE-2026–39987 / GHSA-2679–6mx9-h9xc): From One WebSocket to Shell
════════════════════════
𐀪 Author: Lakshan Sameera
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 13:31:02 GMT
════════════════════════
⌗ Tags: #marimo #cve_2026_39987 #python_notebook #poc #rce_vulnerability
════════════════════════
𐀪 Author: Lakshan Sameera
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 13:31:02 GMT
════════════════════════
⌗ Tags: #marimo #cve_2026_39987 #python_notebook #poc #rce_vulnerability
Medium
Marimo Pre-Auth RCE (CVE-2026–39987 / GHSA-2679–6mx9-h9xc): From One WebSocket to Shell
Marimo Pre-Auth RCE (CVE-2026–39987 / GHSA-2679–6mx9-h9xc): From One WebSocket to Shell A step-by-step reproduction using a custom Dockerfile + reliable PoC. All testing done in my isolated …