Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
PoC-CVE-2026-23744 — Remote Code Execution on MCPJam Inspector <= 1.4.2 | Kitploit
Tools/GitHubGitHub/z4yd3/poc-cve-2026-23744
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubz4yd3/poc-cve-2026-23744

PoC-CVE-2026-23744

Remote Code Execution on MCPJam Inspector <= 1.4.2

View Repository
5 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

PoC-CVE-2026-23744

Remote Code Execution on MCPJam Inspector <= 1.4.2;

CVE-2026-23744 is a critical vulnerability in MCPJam Inspector (versions <= 1.4.2) that allows for unauthenticated Remote Code Execution (RCE).The flaw exists because the application's internal API server binds to all network interfaces (0.0.0.0) by default and lacks authorization on the /api/mcp/connect endpoint. An attacker can send a crafted JSON payload to this endpoint to execute arbitrary commands under the privileges of the user running the Inspector.

CVE-2026-23744

root@kitploit:~
python3 exploit.py https://mpc.kobold.htb <IP> <PORT>

Reference

https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6

Download Tool