Coreweave Marimo — known CVE vulnerabilities

Every CVE whose affected-product data names Coreweave Marimo, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-39987 — CVSS 9.8 (critical) — actively exploited: marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint…