Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

Sysdig reports a skilled human attacker exploited the Marimo RCE vulnerability (CVE-2026-39987) to reach an SSH bastion host within eight seconds using custom Python scripts without AI assistance. The attacker bypassed typical AI-detection traps and maintained prolonged control with over 850 commands executed manually during a nine-hour session.