Missing authentication in Coreweave Marimo
CVSS score
9.8
EPSS probability
%37.9
Risk score
7.4
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Marimo <= 0.20.4 - Pre-Auth Terminal WebSocket RCE
This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell.
CVE-2026-39987 Exploit | by infrar3d
Reproduction and root cause analysis of CVE-2026-39987 Marimo pre-auth WebSocket RCE in a local Docker lab.
https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc
CVE-2026-39987 PoC: Marimo<0.23.0 Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
https://www.sysdig.com/blog/marimo-oss-python-notebook-rce-from-disclosure-to-exploitation-in-under-10-hours
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-39987"