tag

Vhost-Routing

MCPJam Inspector / Arcane MCP Connect Command Injection RCE via Host-Header Vhost Routing (CVE-2026-23520)

CVE-2026-23520· Arcane v1.13.0 (MCPJam Inspector component) unpatched