CVE-2026-73845
Received Received - Intake

Server URL Spoofing in CKAN MCP Server

Publication date: 2026-08-14

Last updated on: 2026-08-14

Assigner: GitHub, Inc.

Description
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckan_get_mqa_quality and ckan_get_mqa_quality_details tools in src/tools/quality.ts use isValidMqaServer to validate the server_url parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host and URL-userinfo values to target an attacker-controlled host and return a spoofed response. This issue is fixed in version 0.4.112.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-14
Last Modified
2026-08-14
Generated
2026-08-14
AI Q&A
2026-08-14
EPSS Evaluated
N/A
NVD
CVE-2026-73845
EUVD
EUVD-2026-58725

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
ckan ckan to 0.4.112 (exc)
ondata ckan_mcp_server 0.4.112
ondata ckan_mcp_server 0.4.111
ondata ckan_mcp_server 0.4.109

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-625 The product uses a regular expression that does not sufficiently restrict the set of allowed values.
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CKAN MCP Server versions before 0.4.112 have a vulnerability in the ckan_get_mqa_quality and ckan_get_mqa_quality_details tools. The isValidMqaServer function uses a regex that only checks the start of server_url for dati.gov.it, allowing attackers to bypass validation by using suffix-host or URL-userinfo tricks like https://attacker@dati.gov.it.evil.com. This lets the server send requests to attacker-controlled hosts, enabling spoofed responses.

Detection Guidance

Check if your system uses @aborruso/ckan-mcp-server versions prior to 0.4.111. Inspect server logs for requests to dati.gov.it domains that may include unexpected suffixes or userinfo in URLs. Use network monitoring tools to detect outbound requests to domains not matching the intended host.

Impact Analysis

An attacker could trick the server into sending requests to malicious hosts, leading to spoofed responses or indirect prompt injection. This could expose sensitive data or allow unauthorized actions if the server processes untrusted input. The SSRF risk also enables network probing from the server's perspective.

Compliance Impact

This vulnerability could lead to unauthorized data exposure or manipulation, violating GDPR's integrity and confidentiality principles or HIPAA's safeguards for protected health information. Organizations using affected versions may fail compliance audits due to insufficient input validation and SSRF risks.

Mitigation Strategies

Upgrade to @aborruso/ckan-mcp-server version 0.4.111 or later. Review and update URL validation logic to use strict host comparison or properly anchored regex. Disable affected tools if immediate patching is not possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73845. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart