A critical vulnerability in Marimo that allows attackers to execute code without authentication is currently being exploited in the wild to steal credentials. If your organization uses Marimo, you should immediately patch to the latest version and monitor
Read the full article: https://www.bleepingcomputer.com/news/security/critical-marimo-pre-auth-rce-flaw-now-under-active-exploitation/