TLDR Tech / InfoSec
Critical Marimo Pre-Auth RCE Flaw Under Active Exploitation
Python notebook environment Marimo announced a new unauthenticated remote code execution vulnerability affecting versions 0.20.4. The vulnerability arises from the WebSocket endpoint exposing an interactive terminal without authentication. Researchers from Sysdig reported that attackers developed an exploit based on the announcement and began scanning for vulnerable systems and exploiting them within 12 hours.
Read the full story