Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

mcpjam/inspector

              main @ 8005427
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

Auth Bypass: 18 prior fixes. Scrutinize any change in this area.

mcpjam-inspector/client/src/App.tsx: most-fixed (3 issues). Treat as high-risk during review.

22 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: Unrestricted interface binding during startup permitted potential port hijacking and arbitrary remote interactions. In tandem with CVE-2026-23744, unauthenticated HTTP requests triggering MCP server installations can lead to arbitrary code execution if the listening interface is exposed.

Auth Bypass: The OAuth proxy paths allowed unauthenticated access to proxy actions and metadata retrieval. Adding bearer token validation and rate limits was required to prevent authorization bypass.

Sandbox Escape: Insecure iframe integration and permissive fallback origins allowed cross-origin sandbox escape, allowing untrusted widgets to access local storage and cookies or communicate via unvalidated postMessage targets.