CVE-2026-23744 Details.
MCPJam Inspector - Remote Code Execution
Atlas does not check this one. Needs an outside server.
To test for this one, the site would have to contact a server outside your network and report back. Atlas does not run checks that need that, so it does not run this one.
About CVE-2026-23744. What It Means.
MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE.
Affected Product. What Is Hit.
- Vendor
- mcpjam
- Product
- MCPJam
FAQ
Common Questions.
MCPJam Inspector - Remote Code Execution. MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE.
No. To test for this one, the site would have to contact a server outside your network and report back. Atlas does not run checks that need that, so it does not run this one. The facts about CVE-2026-23744 are on this page, and you can request a demo to see how Brandefense watches your whole external attack surface.
CVE-2026-23744 is not on the CISA Known Exploited Vulnerabilities list at the time of writing, but it is still worth fixing.
Update MCPJam to the latest version from the vendor, or follow the vendor's advice to switch off the affected feature. Vendor links are listed on this page when they are known.
This page lists the public facts about CVE-2026-23744. Atlas does not run a check for it, so nothing here says whether a particular site is affected.