Exploit for Missing Authentication for Critical Function in Coreweave Marimo
Exploit Code
## https://sploitus.com/exploit?id=C41115C4-5396-5897-BAC9-19842AA8E98D
# CVE-2026-39987.py
This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell.
HOW TO USE :
The only change it has to be made is to the change the HOST variable in the script.
After changing the HOST variable execute the script in your Terminal like the example bellow:
USAGE EXAMPLE:
python3 CVE-2026-39987.py
-- If the target is vulnerable the interactive shell initiates --