{"answers":{"affected":"2 open source packages ship an affected version, including @mcpjam/inspector. It affects 1 product.","exploited":"It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-23744 exists.","fix":"Upgrade @mcpjam/inspector to 1.4.3 or later.","what":"CVE-2026-23744 is a critical missing authorization vulnerability in MCPJam inspector, published on 16 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-23744 and fix it if it is affected.\n\nWhat it is: CVE-2026-23744 is a critical missing authorization vulnerability in MCPJam inspector, published on 16 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-23744 exists.\n\nAffected packages and fixed versions:\n- @mcpjam/inspector (npm): affected all versions; fixed in 1.4.3\n- @mcpjam/inspector (npm): affected all versions; fixed in 1.4.3\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-23744/ (Markdown: https://insights.sbomify.com/CVE-2026-23744/index.md)","id":"CVE-2026-23744","markdown":"https://insights.sbomify.com/CVE-2026-23744/index.md","name":"CVE-2026-23744","record":{"aliases":["GHSA-232v-j27c-5pp6"],"analysis":{"component_type":"developer_tool","fix_type":"patch","impacts":["code_execution"],"network_reachable":"yes","non_default_config":false,"product_category":"MCPJam inspector","requires_auth":"none","summary":"An attacker can achieve remote code execution by sending a crafted HTTP request to the MCPJam inspector, which lacks authentication on its default network interface.","user_interaction":"not_required","vuln_class":"missing_authorization"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"GitHub_M","cpe":[{"product":"inspector","vendor":"mcpjam"}],"cvss":{"score":9.8,"severity":"critical","source":"cna","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"cwes":[{"id":"CWE-306","name":"Missing Authentication for Critical Functionality"}],"description":"MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.","ecosystems":["npm"],"exploits":{"exploitdb":1,"first_seen":"2026-01-16","github_poc":39,"max_poc_stars":12,"metasploit":1,"nuclei":1,"refs":[{"date":"2026-01-20T06:55:53Z","kind":"github_poc","ref":"https://github.com/boroeurnprach/CVE-2026-23744-PoC","stars":12,"title":"CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, an attacker can trigger the installation and execution of a malicious MCP server by sending a crafted HTTP request. Version 1.4.3 contains a patch for this issue."},{"date":"2026-03-21T22:33:03Z","kind":"github_poc","ref":"https://github.com/suljov/CVE-2026-23744-Remote-Code-Execution-POC","stars":12,"title":"MCPJam inspector contains a remote code execution"},{"date":"2026-07-14T18:21:10Z","kind":"github_poc","ref":"https://github.com/CerberusMrXi/CVE-2026-23744-MCPJam-Exploit","stars":7,"title":"A proof-of-concept exploit for CVE-2026-23744 - MCPJam Inspector Remote Code Execution (RCE) vulnerability. This tool demonstrates the security flaw in versions \u003c=1.4.2 and helps security researchers verify patches. For authorized testing and educational purposes only. Includes multiple payload options, command execution, and session management."},{"date":"2026-03-23T18:38:28Z","kind":"github_poc","ref":"https://github.com/FrenzisRed/CVE-2026-23744","stars":4,"title":"CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept (POC"},{"date":"2026-04-10T05:52:49Z","kind":"github_poc","ref":"https://github.com/luiskrnr/exploit-CVE-2026-23744","stars":4,"title":"MCPJam Inspector is a local-first development platform for MCP servers. In versions 1.4.2 (and earlier), a RCE flaw lets attackers send crafted HTTP request that installs an MCP server and runs code remotely, because the service listens on 0.0.0.0 (instead of 127.0.0.1) by default."},{"date":"2026-08-10T09:07:16Z","kind":"github_poc","ref":"https://github.com/Mluex0/CVE-2026-23744-PoC","stars":2,"title":"CVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector ≤1.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload to execute arbitrary commands, granting a reverse shell with PTY."},{"date":"2026-03-24T19:18:14Z","kind":"github_poc","ref":"https://github.com/InzegoSec/CVE-2026-23744","stars":1,"title":"Exploit to MCPJam Inspector \u003c=1.4.2"},{"date":"2026-03-26T16:21:22Z","kind":"github_poc","ref":"https://github.com/ctzisme/CVE-2026-23744","stars":1,"title":"PoC for CVE-2026-23744, demonstrating an unauthenticated RCE in MCPJam Inspector (\u003c= 1.4.2)."}],"tier":"weaponised"},"has_fix":true,"headline":"REC in MCPJam inspector due to HTTP Endpoint exposes","id":"CVE-2026-23744","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"npm","product":null,"products":[],"type":"missing_authorization","year":"2026"},"n_packages":2,"n_references":2,"next":{"headline":"node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization","id":"CVE-2026-23745"},"packages":[{"ecosystem":"npm","fixed":["1.4.3"],"introduced":["0"],"last_affected":[],"package":"@mcpjam/inspector","purl":null,"source":"GHSA-232v-j27c-5pp6"},{"ecosystem":"npm","fixed":["1.4.3"],"introduced":["0"],"last_affected":[],"package":"@mcpjam/inspector","purl":"pkg:npm/%40mcpjam/inspector","source":"GHSA-232v-j27c-5pp6"}],"prev":{"headline":"Discourse allows permalinks to restricted resources to leak resource slugs to unauthorized users","id":"CVE-2026-23743"},"products":["inspector"],"published":"2026-01-16","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"},{"class":"open","licence":"CC0","name":"PoC-in-GitHub"}],"ssvc":{"automatable":"yes","exploitation":"poc","technical_impact":"total"},"state":"PUBLISHED","updated":"2026-01-16","vendors":["MCPJam"]},"summary":"An attacker can achieve remote code execution by sending a crafted HTTP request to the MCPJam inspector, which lacks authentication on its default network interface.","url":"https://insights.sbomify.com/CVE-2026-23744/"}