CVE-2026-23744
MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
- Affected products
- Mcpjam Inspector
- Mcpjam Inspector
- < 1.4.3
- Fix
- Available
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 45.0% (99th percentile)
- Weakness
- CWE-306
- NVD status
- Analyzed
- Published
- 2026-01-16
CVE-2026-23744 at NVD
37 known exploits for CVE-2026-23744
Proof-of-concept code and exploit modules indexed by Sploitus
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
MCPJam Inspector - Remote Code Execution
📄 MCPJam Inspector 1.4.2 Remote Code Execution
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
📄 MCPJam Inspector 1.4.2 Command Injection
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
📄 MCPJam Inspector 1.4.2 Remote Code Execution
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
📄 MCPJam Inspector 1.4.2 Remote Code Execution
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
📄 MCPJam 1.4.2 Command Injection
Exploit for CVE-2026-23744