Remote Code Execution (RCE)

🗓️ 19 Jan 2026 09:08:36Reported by Veracode Vulnerability DatabaseType

MCPJam Inspector exposes unauthenticated HTTP on all interfaces, enabling remote code execution.

Reporter	Title	Published	Views	Family All 51
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	27 Mar 202615:57	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	31 May 202619:17	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	14 Jun 202603:30	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	27 Mar 202615:57	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	31 May 202617:27	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	28 Mar 202620:03	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	30 May 202622:03	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	11 Jul 202611:57	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	24 Mar 202619:18	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Mcpjam Inspector	27 Mar 202614:14	–	githubexploit

Vulners

Node

Source	Link
github	www.github.com/MCPJam/inspector/commit/e6b9cf9d9e6c9cbec31493b1bdca3a1255fe3e7a
github	www.github.com/advisories/GHSA-232v-j27c-5pp6
github	www.github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6

11 Jul 2026 05:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.19.8

EPSS0.43671

SSVC