{"id":"EUVD-2026-64173","enisaUuid":"c30cb6ad-7a1b-3d62-a3ca-35ad506c4c85","description":"CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that accept a base_url parameter had the risk of making HTTP requests to arbitrary endpoints without restriction. A fix was applied to filter out ip addresses. However, a method to bypass exists prior to version 0.4.106. CKAN MCP Server validates caller-supplied CKAN server URLs by inspecting only the parsed hostname string before issuing outbound HTTP requests. In `src/utils/http.ts`, hostname aliases such as `ip6-localhost` are not equal to `localhost`, are not dotted IPv4 literals, and are not bracketed IPv6 literals, so they pass the SSRF filter but can resolve to loopback when the server performs the request. A remote MCP caller that can invoke CKAN tools with a `server_url` can therefore make the server connect to local or private addresses and, for CKAN-shaped responses, receive response-derived data. The updated fix in version 0.4.106 replaced the single `hostname \u003d\u003d\u003d \u0027localhost\u0027` check with a blocked-hostname `Set` covering `ip6-localhost` and `ip6-loopback`.","datePublished":"Aug 21, 2026, 9:21:20 PM","dateUpdated":"Aug 21, 2026, 9:42:22 PM","baseScore":5.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","references":"https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-g84h-j7jj-x32p\nhttps://github.com/advisories/GHSA-3xm7-qw7j-qc8v\nhttps://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.106\n","aliases":"CVE-2026-53509\nGHSA-g84h-j7jj-x32p\n","assigner":"GitHub_M","epss":0.38,"enisaIdProduct":[{"id":"620bb223-f097-35c3-a920-be1dd5050e59","product":{"name":"ckan-mcp-server","vendor":{"name":"ondata"}},"product_version":"\u003c 0.4.106"}],"enisaIdVendor":[{"id":"f8679ab6-6c45-3447-b0c8-1f79182b6bb4","vendor":{"name":"ondata"}}],"enisaIdVulnerability":[{"id":"b481be63-4e0e-3a58-8c5f-616ffc947008","vulnerability":{"id":"CVE-2026-53509","description":"CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that accept a base_url parameter had the risk of making HTTP requests to arbitrary endpoints without restriction. A fix was applied to filter out ip addresses. However, a method to bypass exists prior to version 0.4.106. CKAN MCP Server validates caller-supplied CKAN server URLs by inspecting only the parsed hostname string before issuing outbound HTTP requests. In `src/utils/http.ts`, hostname aliases such as `ip6-localhost` are not equal to `localhost`, are not dotted IPv4 literals, and are not bracketed IPv6 literals, so they pass the SSRF filter but can resolve to loopback when the server performs the request. A remote MCP caller that can invoke CKAN tools with a `server_url` can therefore make the server connect to local or private addresses and, for CKAN-shaped responses, receive response-derived data. The updated fix in version 0.4.106 replaced the single `hostname \u003d\u003d\u003d \u0027localhost\u0027` check with a blocked-hostname `Set` covering `ip6-localhost` and `ip6-loopback`.","datePublished":"Aug 21, 2026, 9:21:20 PM","dateUpdated":"Aug 21, 2026, 9:42:22 PM","status":"PUBLISHED","baseScore":5.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","references":"https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-g84h-j7jj-x32p\nhttps://github.com/advisories/GHSA-3xm7-qw7j-qc8v\nhttps://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.106\n","enisa_id":"EUVD-2026-64173\n","assigner":"GitHub_M","epss":0.38,"dataProcessed":"Nov 5, 2026, 7:16:53 AM","vulnerabilityProduct":[{"id":"c7b3b3fa-39d7-39b1-94fb-5068403e21a1","product":{"name":"ckan-mcp-server","vendor":{"name":"ondata"}},"product_version":"\u003c 0.4.106"}],"vulnerabilityVendor":[{"id":"6698dbf4-9d76-31b2-aa01-01002f4ce9e8","vendor":{"name":"ondata"}}]}},{"id":"e0259f5a-2511-3b82-8b1a-42fa3b2f9d51","vulnerability":{"id":"GHSA-g84h-j7jj-x32p","description":"@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)","datePublished":"Jul 7, 2026, 7:35:57 PM","dateUpdated":"Jul 7, 2026, 7:35:57 PM","baseScore":0.0,"references":"https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-g84h-j7jj-x32p\nhttps://github.com/advisories/GHSA-3xm7-qw7j-qc8v\nhttps://github.com/ondata/ckan-mcp-server\nhttps://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.106\n","enisa_id":"EUVD-2026-64173\n","aliases":"CVE-2026-53509\nGHSA-g84h-j7jj-x32p\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}