GHSA-232V-J27C-5PP6 REC in MCPJam inspector due to HTTP Endpoint exposes

🗓️ 16 Jan 2026 21:15:35Reported by GoogleType

osv

osv🔗 osv.dev👁 8 Views

MCPJam inspector versions 1.4.2 and earlier expose RCE via unauthenticated HTTP to /api/mcp/connect.

Reporter	Title	Published	Views	Family All 50
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	27 Mar 202615:57	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	31 May 202619:17	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	14 Jun 202603:30	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	27 Mar 202615:57	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	31 May 202617:27	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	28 Mar 202620:03	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	30 May 202622:03	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	11 Jul 202611:57	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	24 Mar 202619:18	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	27 Mar 202614:14	–	githubexploit

Source	Link
github	www.github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23744
github	www.github.com/MCPJam/inspector/commit/e6b9cf9d9e6c9cbec31493b1bdca3a1255fe3e7a
github	www.github.com/MCPJam/inspector

03 Feb 2026 03:10Current

8.1High risk

Vulners AI Score8.1

CVSS 3.19.8

EPSS0.43671

remote code execution unauthenticated request mcpjam inspector open connect endpoint binds all interfaces vulnerable versions