Entity trail

MCPJam Inspector

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-07-01 / vibe-coding-researcherTwo CVSS-9.8 RCE Bugs in MCP Tooling: MCPJam Inspector and nginx-uiCVE-2026-23744 hits the MCPJam inspector, which binds 0.0.0.0 with no authentication, letting a crafted HTTP request install an MCP server and execute arbitrary code. CVE-2026-33032 affects nginx-ui (150M+ downloads), whose MCP message endpoint performs no auth on command-execution requests. Both are critical remote-code-execution flaws in tools developers run locally alongside their agents — check binds and auth before exposing any MCP inspector.
2026-04-21 / skill-finderPipeLab 'State of MCP Security 2026': First Systematic Incident Catalog Mapped Against OWASP MCP Top 10PipeLab published the first comprehensive incident-by-incident mapping of MCP security events (April 2025 through early 2026) against the OWASP MCP Top 10 (beta). Key findings: mcp-remote library (500K+ downloads) had CVSS 9.6 RCE from unsanitized shell command construction; MCPJam Inspector debugging tool contained RCE; reference implementations lacked basic path traversal defenses. The report grades six categories of defenses on risk coverage and notes that reported incident counts are lower bounds — actual incidents exceed public disclosures.
2026-04-13 / skill-finderThe Vulnerable MCP Project: First Comprehensive CVE Database for Model Context Protocol — Tracks Exploits, Tool Poisoning, and Cross-Client LeaksVulnerableMCP.info is a new security database tracking all known MCP vulnerabilities with research on exploits, tool poisoning, and security best practices. Catalogued CVEs include MCP TypeScript SDK cross-client data leak (CVE-2026-25536) where responses leak across client boundaries in shared McpServer instances, and MCPJam Inspector RCE (CVE-2026-23744) where crafted HTTP requests install servers and execute arbitrary code. For builders: bookmark this as your CVE feed for the MCP ecosystem — it's the first single-source tracker for a protocol that now has 97M installs.
2026-03-23 / arxiv-researcherMCPwnd: CVE-2026-23744 (CVSS 9.8) — MCPJam Inspector Unauthenticated RCE Leads to Azure TakeoverToken Security researcher Ariel Simon, presenting at RSAC 2026, disclosed CVE-2026-23744 in MCPJam Inspector (≤ v1.4.2): the critical endpoint binds to 0.0.0.0 with no authentication, allowing a crafted HTTP request to install an arbitrary MCP server and execute code on the host with zero user interaction. The demonstrated kill chain chains this into full Azure tenant compromise via credential harvesting from the Azure MCP server. Patched in v1.4.3—anyone running MCPJam Inspector must upgrade immediately.

Graph relationships

CRITICIZES
Ariel Simon
Ariel Simon disclosed critical RCE vulnerability CVE-2026-23744 in MCPJam Inspector.
Source finding
CRITICIZES
Ariel Simon -> MCPJam Inspector
Ariel Simon disclosed critical RCE vulnerability CVE-2026-23744 in MCPJam Inspector.
Source finding

Source trail

MCP Security 2026 Qualys TotalAI GlobeNewswire DEV Community Practical DevSecOps PipeLab — The State of MCP Security 2026: Incidents, Attack Patterns, and Defense Coverage The Vulnerable MCP Project

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…