CVE-2026-23744 gave zero-click RCE on MCPJam Inspector at CVSS 9.8.
A booby-trapped PDF tripped a physical pump via a Claude MCP link.
https://botmonster.com/ai/ai-coding-agent-insider-threat-prompt-injection-mcp-exploits/?utm_source=bluesky&utm_medium=social #ClaudeAI
