Case sysdig-marimo-llm-agent-pivotsAgent hijackWorldwide
Sysdig: LLM agent pivots from marimo RCE to internal Postgres dump in under an hour
After exploiting CVE-2026-39987 in an exposed marimo notebook, an attacker gave stolen AWS credentials to an LLM agent that fetched an SSH key, hopped a bastion and dumped a PostgreSQL database in under an hour.
HighAttack using AIStatus: PatchedVerified case file
Open in the interactive mapCite this case
- Reported
- May 10, 2026
- Location
- Worldwide
- Target
- Cloud environment of an unnamed organisation
- Severity
- High
- Triggered by
- Unknown
- Actor type
- Unknown
- Reported loss
- None reported
- CVE
- CVE-2026-39987
What happened
After exploiting CVE-2026-39987 in an exposed marimo notebook, an attacker gave stolen AWS credentials to an LLM agent that fetched an SSH key, hopped a bastion and dumped a PostgreSQL database in under an hour.
Impact: Schema and full contents of an internal PostgreSQL database including api_key, credential and user tables exfiltrated; bastion phase took 113 seconds.
Who triggered it
Actor: Unknown
Attribution: Sysdig TRT; a leaked Chinese-language planning comment and machine-shaped commands indicated LLM agent execution. Operator unidentified.
Motive: Credential and data theft
How it happened
Attack vector: Unauthenticated marimo terminal WebSocket RCE, credential harvesting from .env and AWS files, Secrets Manager replay, SSH bastion lateral movement
Root cause: Internet-exposed notebook with pre-auth RCE and long-lived cloud credentials on the host
Timeline
- Marimo exploited at 18:23 UTC; database dumped within the hour
- Sysdig publishes analysis
Response
Sysdig published detections; marimo 0.23.0 fixes the flaw.
Current status: Patched
Sources (open in a new tab)
- Sysdig sysdig.com
- The Hacker News thehackernews.com
Cite this case
Sysdig: LLM agent pivots from marimo RCE to internal Postgres dump in under an hour. AI Threat Watch, case sysdig-marimo-llm-agent-pivots, May 10, 2026. https://aithreat.io/cases/sysdig-marimo-llm-agent-pivots/
Permanent link: https://aithreat.io/cases/sysdig-marimo-llm-agent-pivots/