Exploit for Missing Authentication for Critical Function in Mcpjam Inspector CVE-2026-23744

Name: Exploit for Missing Authentication for Critical Function in Mcpjam Inspector CVE-2026-23744
Rating: 5 (121 reviews)

2026-06-02 | CVSS 9.8

## https://sploitus.com/exploit?id=D99A0BB7-56FB-5C9E-A5E5-63F845A32F54
# CVE-2026-23744 - MCPJam Inspector RCE PoC

Proof of Concept exploit for **CVE-2026-23744**: Remote Code Execution vulnerability in MCPJam Inspector  1.4.2
2. **Restrict network access** to MCPJam Inspector (use firewall rules)
3. **Bind to localhost** instead of 0.0.0.0 in configuration
4. **Implement authentication** for the `/api/mcp/connect` endpoint

## References

- [MCPJam Inspector GitHub](https://github.com/mcpjam/inspector)
- [CVE Details](https://cve.mitre.org/)

## License

This PoC is provided as-is for educational and authorized security testing purposes.