AI‑driven LLM agent pivots from Marimo RCE to steal internal PostgreSQL data
The Sysdig Threat Research Team documented an intrusion where attackers exploited Marimo’s CVE‑2026‑39987, harvested cloud credentials, and then used a large‑language‑model agent to orchestrate rapid post‑exploitation steps, exfiltrating a PostgreSQL database in under two minutes. This marks the first known AI‑agent‑driven attack chain observed in the wild.