{
  "id": 7473895,
  "title": "Human operator executes Marimo cloud pivot in eight seconds",
  "url": "https://urgent.news/2026/09/15/human-operator-executes-marimo-cloud-pivot-in-eight-seconds",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-15T04:50:25.000Z",
  "source": {
    "name": "Arabian Post",
    "slug": "arabian-post",
    "url": "https://thearabianpost.com/human-operator-executes-marimo-cloud-pivot-in-eight-seconds/"
  },
  "original_language": "en",
  "account": "A human attacker exploited a critical vulnerability in the Marimo notebook platform to gain authenticated access on an SSH bastion host in eight seconds, according to Sysdig’s Threat Research Team. The attack, which targeted CVE-2026-39987, involved chaining initial shell access, cloud credential use and retrieval of an SSH private key. The attacker used a hand-built Python toolkit rather than an AI agent, demonstrating manual debugging, varied command construction and deliberate pacing. The operator issued over 850 interactive commands over a nine-hour session, writing, testing and refining scripts manually before reusing them to accelerate later access attempts. The attack began when a new WebSocket session was opened, and successful authentication to the bastion host followed shortly after. The operator obtained AWS credentials from the compromised environment and Redis backend, mapping to different IAM users. The vulnerability, which stems from missing authentication checks on Marimo’s WebSocket endpoint, was disclosed on April 8 and rated critical. Marimo advised users to upgrade to version 0.23.0, which added the necessary authentication validation.",
  "summary": "A skilled human attacker exploited a critical Marimo notebook flaw and moved from an exposed WebSocket session to authenticated access on an SSH bastion host in eight seconds, Sysdig’s Threat Research Team has documented. The operation centred on CVE-2026-39987, a pre-authentication remote code execution vulnerability affecting the Marimo Python notebook platform. Sysdig said the attacker used a…",
  "key_points": [
    "Human attacker exploited Marimo notebook platform vulnerability in 8 seconds",
    "Operator used Python toolkit, manual debugging and deliberate pacing",
    "CVE-2026-39987 vulnerability disclosed April 8, rated critical"
  ],
  "editors_take": "This incident shows that exploiting a critical vulnerability can rapidly grant attackers extensive access, highlighting the importance of promptly addressing such flaws, as seen with Marimo's vulnerability disclosure and patch.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}