Sploitus

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

githubexploit Β· 2026-08-20

Exploit Code

README12 lines
## https://sploitus.com/exploit?id=C41115C4-5396-5897-BAC9-19842AA8E98D
# CVE-2026-39987.py
This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell.

HOW TO USE : 
The only change it has to be made is to the change the HOST variable in the script.
After changing the HOST variable execute the script in your Terminal like the example bellow:

USAGE EXAMPLE:
python3 CVE-2026-39987.py

-- If the target is vulnerable the interactive shell initiates --