Vulnerability · Published Jan 16, 2026 · Assigned by GitHub_M
CVE-2026-23744REC in MCPJam inspector due to HTTP Endpoint exposes
Critical 9.8
In plain English
A critical-severity missing authentication in inspector from MCPJam. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 67.5% (higher than 99.3% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | @mcpjam/inspector | 1.4.3 | GHSA-232v-j27c-5pp6 |
Affected products (as reported)
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H