ctzisme/cve-2026-23744Proof-of-concept exploit for CVE-2026-23744, demonstrating unauthenticated remote code execution in MCPJam Inspector versions up to 1.4.2 via crafted HTTP requests.
The Python script in this PoC sends a simple HTTP request to the target host running MCPJam inspector (version <= 1.4.2) and triggers an RCE attack. See this advisory for details.
Install requests:
pip install requests
First, set up your listener:
nc -lvnp <lport> # replace with your listening port
Then, open another shell, and run the PoC:
cd CVE-2026-23744
python3 exploit.py
This project is for educational and research purposes only. Do not use this code against systems you do not own or have explicit permission to test.
MIT License