Metasploit Wrap-Up 05/01/2026

MCP server

This release our very own .

This first iteration is read-only, covering modules, hosts, services, vulnerabilities, and more. Tools for module execution, session interaction, and database modifications are on the roadmap for a future release. Full details are available in the  and identified by  contributed by  contributed by 

Description: Adds a module for CVE-2026-31431 (The Copy Fail LPE for Linux), a local privilege escalation affecting almost every Linux Kernel since 2017.

Linux Execute Command

Author: Spencer McIntyre

Type: Payload (Single)

Pull request: 

Path: linux/aarch64/exec

Description: Adds a module for CVE-2026-31431 (The Copy Fail LPE for Linux), a local privilege escalation affecting almost every Linux Kernel since 2017.

Enhancements and features (5)

•  - This adds a read-only MCP server for Metasploit capable of retrieving information from the loaded modules and database.
• ,  from .

  Get it

  As always, you can update to the latest Metasploit Framework with msfupdate and you can get more details on the changes since the last blog post from GitHub:

  If you are a git user, you can clone the  or the commercial edition Metasploit Pro

  Vollständiges Original-Advisory

  Ausführliche Details, Exploit-Analyse & Hersteller-Stellungnahme auf rapid7.com.

  ↗ Original-Artikel auf rapid7.com lesen