CVE-2026-39987.py

CVE-2026-39987.py Este script Python explora o endpoint vulnerável marimo /terminal/ws e retorna um shell interativo. COMO USAR : A única alteração que precisa ser feita é mudar a variável HOST no script. Após alterar a variável HOST, execute o script no seu Terminal como no exemplo abaixo: EXEMP...

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987.py This python script exploit the vulnerable ma...

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987 Lab Guide Pre-Auth Remote Code Execution v...

CVE-2026-39987 marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. Unlike other WebSock...