Description
This module exploits an unauthenticated command execution vulnerability in MCPJam Inspector. The /api/mcp/connect endpoint accepts a JSON serverConfig object containing a command and argument list used to start an MCP server. A remote attacker can abuse this endpoint to execute arbitrary operating system commands as the user running MCPJam Inspector.
By default, this module starts a transient Node.js stdio MCP server, then invokes a tool that executes the Metasploit command payload. A direct /bin/sh -c mode is also available via EXEC_METHOD=direct_sh, but the MCP tool mode is more reliable when the inspector expects a valid MCP handshake.
Module options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/multi/http/mcpjam/inspector_rcemsf undefined(inspector_rce) > show actions ...actions...msf undefined(inspector_rce) > set ACTION < action-name >msf undefined(inspector_rce) > show options ...show and set options...msf undefined(inspector_rce) > runPrioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub