
Proof-of-concept exploit for CVE-2026-23744, a remote code execution vulnerability in MCPJam inspector <=1.4.2, triggered via crafted HTTP requests to install a malicious MCP server.
MCPJam inspector <= 1.4.2 contains a remote code execution caused by crafted HTTP requests triggering MCP server installation, letting remote attackers execute arbitrary code, exploit requires network access to the listening interface.
This is POC for this vulnerability
Edit the target TARGET, ATTACKER_IP and ATTACKER_PORT
Start a listener
nc -lvnp <ATTACKER_PORT>
python3 exploit.py