CVE-2026-39987.py

This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell.

HOW TO USE : The only change it has to be made is to the change the HOST variable in the script. After changing the HOST variable execute the script in your Terminal like the example bellow:

USAGE EXAMPLE: python3 CVE-2026-39987.py

-- If the target is vulnerable the interactive shell initiates --

For Informations about CVE-2026-39987 open this link -> https://nvd.nist.gov/vuln/detail/CVE-2026-39987

Edit: If you dont already have the websocket-client library installed, please do this first before running the script otherwise it wont work.

install the library by typing the command : pip3 install websocket-client if you recieve the error: " This environment is externally managed ╰─> To install Python packages system-wide, try < your package manager here > install xyz, where xyz is the package you are trying to install. "

                                                          #this command creates a folder where you gonna create the venv ( in step 2 )

create an virtual envirement by typing the following command : step 1 -> mkdir /path/to/venv-folder #this command creates the python venv step 2 -> python3 -m venv /path/to/venv-folder #this command activates the venv step 3 -> source /path/to/venv-folder/bin/activate #this command installs the websocket-client library step 4 -> pip3 install websocket-client

if you followed all the steps above, run the script while the virtual envirement is still activated. to exit the evirement type the command -> deactivate