marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

marimo notebook application has a critical flaw where its terminal feature can be accessed without authentication, allowing attackers to run any command on the server. This bypasses all security protections that should prevent unauthorized access.

The /terminal/ws WebSocket endpoint lacks authentication validation, accepting unauthenticated connections that provide full PTY shell access. Unlike properly protected endpoints that invoke validate_auth(), this endpoint only verifies running mode and platform compatibility, enabling pre-authentication remote code execution on the underlying system.