SecurityThe Hacker Newsabout 1 hour ago
Human Hacker Exploits Marimo RCE in Eight Seconds
1 min read
Sysdig researchers documented a skilled human attacker who exploited a critical remote code execution vulnerability (CVE-2026-39987) in the Marimo notebook platform. The attacker pivoted from initial access to an SSH bastion host in just eight seconds using a custom, hand-written Python toolkit. The entire attack chain, which included harvesting AWS credentials and deploying a listener, lasted nine hours and involved over 850 interactive commands.
Level
Hype check
Tap to vote and see what everyone thinks.
