CVE-2026-23744
REC in MCPJam inspector due to HTTP Endpoint exposes
- Published
- Jan 16, 2026
- Updated
- Jan 16, 2026
- Assigning CNA
- GitHub_M
- Evidence observed
- Jul 7, 2026
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HHigh · next 30 days
- Percentile
- 99.3%
- Model date
- Oct 15, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
Sources
modules/exploits/multi/http/mcpjam_inspector_rce.rb
Metasploit Framework modulesDeclared conditions
- platform: Linux,Unix($.exploit_multi/http/mcpjam_inspector_rce.platform)
- verification: check_declared($.exploit_multi/http/mcpjam_inspector_rce.check)
http/cves/2026/CVE-2026-23744.yaml
Nuclei TemplatesDeclared conditions
- network: http($.protocol_keys)
- verification: dsl($.matchers[*].type)
- oob: interactsh_reference($.template_text)
- CVE-2026-23744-scriptExploit
Exploit script for CVE-2026-23744 targeting MCPJam Inspector (<=1.4.2) to achieve remote code execution via crafted HTTP requests.
Python exploit for CVE-2026-23744 in MCPJam Inspector 1.4.2, enabling remote code execution via reverse shell on target HTTP servers.
- CVE-2026-23744Exploit
Python exploit script for CVE-2026-23744 that delivers a reverse shell to a specified target URL, requiring a netcat listener for command-and-control.
CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, an attacker can trigger the installation and execution of a malicious MCP server by sending a crafted HTTP request. Version 1.4.3 contains a patch for this issue.
A proof-of-concept exploit for CVE-2026-23744 - MCPJam Inspector Remote Code Execution (RCE) vulnerability. This tool demonstrates the security flaw in versions <=1.4.2 and helps security researchers verify patches. For authorized testing and educational purposes only. Includes multiple payload options, command execution, and session management.
Proof-of-concept exploit for CVE-2026-23744, demonstrating unauthenticated remote code execution in MCPJam Inspector versions up to 1.4.2 via crafted HTTP requests.
Proof of Concept (PoC) exploit for CVE-2026-23744, a vulnerability affecting MCPJam Inspector that allows remote command execution (RCE) through exposed internal debugging endpoints
CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept (POC
Proof-of-concept exploit for CVE-2026-23744, targeting /api/mcp/connect to achieve remote command execution on Linux systems via reverse shell.
- CVE-2026-23744Exploit
Exploit for MCPJam Inspector <=1.4.2 that triggers remote code execution via crafted HTTP requests, enabling unauthorized installation of MCP servers without user interaction.
- mcp-pwnExploit
PoC exploit for CVE-2026-23744 — unauthenticated RCE in MCPJam Inspector via unvalidated serverConfig command injection on /api/mcp/connect, enabling reverse shell as process owner without credentials.
- CVE-2026-23744-pocExploit
cve-2026-23744 python exploit
- CVE-2026-23744-PoCExploit
CVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector ≤1.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload to execute arbitrary commands, granting a reverse shell with PTY.
- CVE-2026-23744Exploit
Proof-of-concept and offensive security research analyzing CVE-2026-23744 (MCPJam Inspector Unauthenticated RCE, Patched in v1.4.3+).
- CVE-2026-23744Exploit
Unauthenticated remote code execution proof-of-concept for CVE-2026-23744 targeting MCPJam Inspector. Generates crafted MCP serverConfig payloads to exploit /api/mcp/connect endpoint with reverse shell and dry-run debugging support.
- cve-2026-23744Exploit
Proof-of-concept exploit for CVE-2026-23744, an unauthenticated RCE in MCPJam Inspector. Provides reverse shell and command execution via a vulnerable API endpoint.
- CVE-2026-23744-LabResearch
Docker lab to compare vulnerable and patched builds of MCPJam Inspector for CVE-2026-23744, demonstrating network binding differences and API exposure for educational security research.
- CVE-2026-23744-POCExploit
CVE-2026-23744 — Proof of concept exploit for an unauthenticated Remote Code Execution vulnerability in MCPJam Inspector <= 1.4.2.
Python exploit for CVE-2026-23744 achieving remote code execution via crafted POST requests to the /api/mcp/connect endpoint in MCPJam Inspector <= 1.4.2.
Python PoC for CVE-2026-23744, unauthenticated RCE in MCP servers via the /api/mcp/connect serverConfig command field (default port 6274)
CVE-2026-23744 Proof-of-concept.
- CVE-2026-23744Exploit
Remote Code Execution in MCPJam 1.4.2 and older
Proof-of-concept exploit for CVE-2026-23744, a remote code execution vulnerability in MCPJam inspector <=1.4.2, triggered via crafted HTTP requests to install a malicious MCP server.
- CVE-2026-23744-RCEExploit
This utility was created during research involving MCPJam v1.4.2. The application exposes an API endpoint that accepts a server configuration object. Under certain conditions, insufficient validation may allow unintended command execution.
- mcpExecExploit
POC for CVE-2026-23744 for a python revshell
This Python proof-of-concept targets a vulnerable MCP (Model Context Protocol) service exposed by the target application. The vulnerability allows an attacker to supply arbitrary server configuration parameters through the /api/mcp/connect endpoint.
- CVE-2026-23744-exploitExploit
Exploit for MCPJam Inspector - Remote Code Execution (CVE-2026-23744)
- mcpjaminspector-unauth-rceExploit
Proof-of-concept exploit for CVE-2026-23744, an unauthenticated remote code execution in MCPJam inspector <= 1.4.2, allowing command execution on vulnerable targets.
- mcpjam-to-rootResearch
From MCPJam Inspector RCE to root — CVE-2026-23744, JupyterLab token disclosure, kernel execution, and OPSMCP privilege escalation
Bounded proof-of-concept validator for CVE-2026-23744. Confirms unauthenticated remote code execution in MCPJam Inspector via a fixed, non-destructive evidence command. Designed for authorized security assessments with structured JSON output.
- exploit-CVE-2026-23744Exploit
Exploit for CVE-2026-23744, a remote code execution vulnerability in MCPJam Inspector, allowing attackers to execute arbitrary commands via crafted HTTP requests.
Proof-of-concept exploit for CVE-2026-23744, a remote code execution vulnerability in MCPJam Inspector. Demonstrates RCE via crafted HTTP request to /api/mcp/connect endpoint with reverse shell payload.
- CVE-2026-23744Exploit
CVE-2026-23744 Reverse shell
CVE-2026-23744 PoC
The poc of CVE-2026-23744
Remote Code Execution on MCPJam Inspector <= 1.4.2
Dedicated repository for CVE-2026-23744, providing vulnerability research and proof-of-concept code.
- CVE-2026-PoCsResearch
Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and Threat Intelligence. Replacing manual searches for elite SOC teams, DevSecOps, and Bug Bounty Hunters.
Diamorphine · multiple · Jul 7, 2026
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.