Two CVSS-9.8 RCE Bugs in MCP Tooling: MCPJam Inspector and nginx-ui
Practical DevSecOps·medium signal
CVE-2026-23744 hits the MCPJam inspector, which binds 0.0.0.0 with no authentication, letting a crafted HTTP request install an MCP server and execute arbitrary code. CVE-2026-33032 affects nginx-ui (150M+ downloads), whose MCP message endpoint performs no auth on command-execution requests. Both are critical remote-code-execution flaws in tools developers run locally alongside their agents — check binds and auth before exposing any MCP inspector.