CVE-2026-39987.py

CVE-2026-39987.py 这个 Python 脚本利用存在漏洞的 marimo /terminal/ws 端点，并返回一个交互式 shell。 使用方法： 唯一需要修改的是脚本中的 HOST 变量。 更改 HOST 变量后，在终端中执行脚本，如下例所示： 使用示例： python3 CVE-2026-39987.py -- 如果目标存在漏洞，交互式 shell 将启动 -- 有关 CVE-2026-39987 的信息，请打开此链接 - https://nvd.nist.gov/vuln/detail/CVE-2026-39987 注意：如果你尚未安装...

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987.py This python script exploit the vulnerable ma...

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987 Lab Guide Pre-Auth Remote Code Execution v...

CVE-2026-39987 marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. Unlike other WebSock...