Listen to this Post
The vulnerability in MCPJam Inspector (<=1.4.2) is a critical unauthenticated Remote Code Execution flaw. By default, the inspector’s HTTP server binds to 0.0.0.0, exposing its API network-wide. The `/api/mcp/connect` endpoint accepts a JSON payload containing `command` and `args` fields. These parameters are passed directly to a child process execution function (e.g., spawn) without any validation, authorization, or sandboxing. An attacker can send a crafted HTTP POST request to this endpoint from any reachable network location. The server blindly executes the provided command with the supplied arguments, allowing complete system compromise. This differs from related flaws as it requires no user interaction, making it wormable.
Platform: MCPJam Inspector
Version: <=1.4.2
Vulnerability: Unauthenticated RCE
Severity: Critical
date: 2024-12-17
Prediction: Patched 2024-12-27
What Undercode Say:
npx @mcpjam/inspector@latest
curl http://TARGET_IP:6274/api/mcp/connect -H "Content-Type: application/json" --data "{\"serverConfig\":{\"command\":\"cmd.exe\",\"args\":[\"/c\", \"calc.exe\"]}}"
How Exploit:
Send unauthenticated HTTP POST request to `/api/mcp/connect` endpoint with malicious `command` and `args` in JSON.
Protection from this CVE:
Bind to localhost (127.0.0.1). Implement authentication/authorization. Sanitize command inputs. Use network firewall.
Impact:
Full System Compromise
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
