Exploit for Missing Authentication for Critical Function in Coreweave Marimo CVE-2026-39987

Name: Exploit for Missing Authentication for Critical Function in Coreweave Marimo CVE-2026-39987
Rating: 5 (4 reviews)

2026-08-02 | CVSS 9.8

## https://sploitus.com/exploit?id=9E352F16-B801-5CF0-8277-337BF3DD71F0
# CVE-2026-39987
Marimo exploit prior to 0.23.0. Pre-Auth RCE vulnerability via websocket endpoint : /terminal/ws.