12 matches found
CVE-2026-23744-MCPJAM-RCE-exploit
CVE-2026-23744-MCPJAM-RCE-exploit 이 Python 개념 증명PoC은 대상 애플리케이션에 노출된 취약한 MCPModel Context Protocol 서비스를 대상으로 합니다. 이 취약점으로 인해 공격자는 /api/mcp/connect 엔드포인트에 임의의 서버 구성 매개변수를 공급할 수 있습니다. 영향을 받는 엔드포인트 POST /api/mcp/connect 사용된 도구 및 기술 Python 3 requests 라이브러리 HTTP/JSON API 통신 MCP 서비스 인터페이스 실행 의존성 설치: pip...
DevHub-HTB-Walkthrough
DevHub – Прохождение HTB Medium Linux Машина: DevHub Сложность: Medium ОС: Linux Темы: CVE-2026-23744, Chisel-туннелирование, Jupyter, Flask API, повышение привилегий до root 📌 1. Разведка nmap -sC -sV devhub.htb Результат: Порт 22 SSH Порт 80 HTTP Порт 6274 MCPJam Inspector 📌 2. Настройка файла...
CVE-2026-23744
CVE-2026-23744 CVE-2026-23744 RCE В ходе анализа этой уязвимости я обнаружил, что MCPJam Inspector выставил конечную точку /api/mcp/connect в сеть, привязавшись к 0.0.0.0. Эта конечная точка принимает JSON-объект, содержащий serverConfig, включая поля command и args. Приложение предназначалось дл...
PoC-CVE-2026-23744
PoC-CVE-2026-23744 Удалённое выполнение кода в MCPJam Inspector Ссылка https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6...
CVE-2026-57124
PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api/mcp/connect without mandatory authentication and accept caller-controlled command and args values that PraisonAIUI passes to StdioMCPClient to start a local process. Because the UI commands...
CVE-2026-57124 PraisonAI UI MCP connect endpoint allows unauthenticated local command execution
PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api/mcp/connect without mandatory authentication and accept caller-controlled command and args values that PraisonAIUI passes to StdioMCPClient to start a local process. Because the UI commands...
CVE-2026-57124
PraisonAI (a multi-agent LLM framework) is vulnerable to unauthenticated remote code execution in versions prior to 4.6.59 . The default UI host applications expose POST /api/mcp/connect without mandatory authentication, accepting caller-controlled command and args fields that are passed to Stdio...
GO-2026-5678 Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
Obot has an authorization bypass in /mcp-connect/id that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot...
PT-2026-61778
PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api/mcp/connect without mandatory authentication and accept caller-controlled command and args values that PraisonAIUI passes to StdioMCPClient to start a local process. Because the UI commands...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 — MCPJam Unauthenticated Remote Code Execution...
GHSA-VW82-7FV8-R6GP Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server
Summary If you have the MCP Server ID, you can connect to the MCP server even if you don't have permissions to the server. The MCP gateway endpoint /mcp-connect/mcpid does not enforce Access Control Rules ACRs. Any authenticated Obot user who possesses an MCP Server ID can connect to that server...