Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure

A critical remote code execution vulnerability (CVE-2026-39987) in Marimo, a Python data science notebook, was exploited within 10 hours of disclosure. The flaw affects all versions up to a specific release and was identified by Sysdig with a CVSS score of 9.3.