A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation, leveraged for credential theft. [...]
Critical Marimo pre-auth RCE flaw now under active exploitation
Summary + source link. No paywalls, no tracking.