Hackers exploit Marimo flaw to spread NKAbuse malware via Hugging Face

Hackers are exploiting a critical flaw in Marimo's reactive Python notebook to spread a new variant of NKAbuse malware, sneaking malicious payloads onto Hugging Face Spaces, a popular platform for sharing machine learning models. This alarming attack highlights the need for vigilance when it comes to defending against malware…

https://osintsights.com/hackers-exploit-marimo-flaw-to-spread-nkabuse-malware-via-hugging-face?utm_source=mastodon&utm_medium=social

#Marimo #NkabuseMalware #HuggingFace #MalwareOperations #EmergingThreats

Critical #Marimo pre-auth RCE flaw now under active exploitation

https://www.bleepingcomputer.com/news/security/critical-marimo-pre-auth-rce-flaw-now-under-active-exploitation/

#cybersecurity

Marimo Flaw Exploited for Credential Theft in Active Attacks

A critical vulnerability in Marimo is being actively exploited by attackers to steal sensitive credentials, and it requires no prior authentication to run code remotely. This flaw has severe consequences for organizations using Marimo, making it essential to take immediate action.

https://osintsights.com/marimo-flaw-exploited-for-credential-theft-in-active-attacks?utm_source=mastodon&utm_medium=social

#Marimo #CredentialTheft #RemoteCodeExecution #Preauthentication #ActiveExploitation

Marimo Flaw CVE-2026-39987 Exploited Rapidly After Disclosure

A single line of code can drastically change the risk landscape for thousands of users - and that's exactly what happened with Marimo, an open-source Python notebook, when a critical vulnerability (CVE-2026-39987) was exploited just 10 hours after its disclosure. This severe flaw, with a CVSS score of 9.3, allows pre-authenticated…

https://osintsights.com/marimo-flaw-cve-2026-39987-exploited-rapidly-after-disclosure?utm_source=mastodon&utm_medium=social

#Cve202639987 #Marimo #RemoteCodeExecution #OpensourceSoftware #DataScience

One missed auth check on a WebSocket = full shell. The #Marimo vuln (CVE-2026-39987) was exploited in ~10 hours.

Upgrade to 0.23.0+, enforce auth on every WebSocket, and keep terminals off the public internet—WebSockets don’t inherit security.
https://www.endorlabs.com/learn/root-in-one-request-marimos-critical-pre-auth-rce-cve-2026-39987

Falling in love with #marimo.
Scattering of roots of perturbed quadratic equations.
Made with #python #numpy #matplotlib and @marimo_io

Notebook and code: https://static.marimo.app/static/roots-of-perturbed-quadratic-equations-4qhc