MCPJam Inspector CVE-2026-23744 unauthenticated RCE

CVE-2026-23744: MCPJam Inspector = 1.4.2 exposes /api/mcp/connect without authentication and spawns attacker-controlled serverConfig.command/args. The app binds to 0.0.0.0 by default, enabling remote unauthenticated RCE. Fixed in 1.4.3+. !/usr/bin/env python3 -- coding: utf-8 -- import base64 fro...