1. Conduid
  2. Social
  3. CVE 2026 23744 PoC
MCP server · Social

CVE 2026 23744 PoC

CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, an attacker can trigger the installation and execution of a malicious MCP server by sending a crafted HTTP request. Version 1.4.3 contains a patch for this issue.

Unclaimed social
39Low

Scored 28 days ago · breakdown

About CVE 2026 23744 PoC

CVE 2026 23744 PoC is an MCP server published by boroeurnprach in the Social category: cVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, an attacker can trigger the installation and execution of a malicious MCP server by sending a crafted HTTP request. Version 1.4.3 contains a patch for this issue.

The repository has 12 stars and 0 forks.

Install

From source
git clone https://github.com/boroeurnprach/CVE-2026-23744-PoC

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about CVE 2026 23744 PoC

Powered by Claude · Grounded in docs

I know everything about CVE 2026 23744 PoC. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About CVE 2026 23744 PoC

How do I install CVE 2026 23744 PoC?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is CVE 2026 23744 PoC safe to use with an AI agent?

Its trust score is 39 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is CVE 2026 23744 PoC still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.