Description
MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
Published: 2026-01-16
Score: 9.8 Critical
EPSS: 45.0% Moderate
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Based on the description, it is inferred that the attacker does not need authentication to exploit the flaw. MCPJam inspector allows an unauthenticated attacker to send a crafted HTTP request that, due to a missing authentication check for privileged operations (CWE-306), triggers the automatic installation of an MCP server. This operation runs with elevated privileges, giving the attacker full remote code execution on the host. The flaw exists because the service, by default, listens on 0.0.0.0 to any machine that can reach it.

Affected Systems

MCPJam inspector versions 1.4.2 and earlier are affected.

Risk and Exploitability

The vulnerability scores a CVSS base of 9.8 and an EPSS of 44%, indicating a significant likelihood of exploitation. It is not yet listed in the CISA KEV catalog. Based on the description, it is inferred that the attack does not require authentication and can be performed from any network that can reach the HTTP interface, making exposed or open machines at significant risk.

Generated by OpenCVE AI on July 27, 2026 at 04:47 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to MCPJam inspector version 1.4.3 or later, which addresses the authentication flaw.
  • Restrict network access to the inspector's HTTP interface by configuring firewall rules or reconfiguring the service to bind to 127.0.0.1, preventing remote connections.
  • If upgrading is not immediately possible, set up a reverse proxy that requires authentication before forwarding requests to the inspector, adding an additional layer of protection.

Generated by OpenCVE AI on July 27, 2026 at 04:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-232v-j27c-5pp6 REC in MCPJam inspector due to HTTP Endpoint exposes
History

Fri, 13 Mar 2026 14:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:mcpjam:inspector:*:*:*:*:*:*:*:*

Mon, 19 Jan 2026 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Mcpjam
Mcpjam inspector
Vendors & Products Mcpjam
Mcpjam inspector

Fri, 16 Jan 2026 21:30:00 +0000

Type Values Removed Values Added
Description MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
References

Fri, 16 Jan 2026 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 16 Jan 2026 20:15:00 +0000

Type Values Removed Values Added
Description MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request.
Title REC in MCPJam inspector due to HTTP Endpoint exposes
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Mcpjam Inspector
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-01-16T21:15:53.738Z

Reserved: 2026-01-15T15:45:01.958Z

Link: CVE-2026-23744

cve-icon Vulnrichment

Updated: 2026-01-16T20:20:51.618Z

cve-icon NVD

Status : Analyzed

Published: 2026-01-16T20:15:51.763

Modified: 2026-06-17T10:22:02.160

Link: CVE-2026-23744

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-27T05:00:04Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function