CVE-2026-61612

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to version 0.4.108, the SSRF guard `validateServerUrl` (added for CVE-2026-33060, extended for CVE-2026-53509) validates only the hostname string and never resolves DNS. Any caller-supplied `server_url` whose hostname *resolves* to an internal address passes the guard, so the server issues requests to loopback and cloud metadata (`169.254.169.254`). This is a third bypass of the same guard, and it reaches IMDS — strictly more than CVE-2026-53509, which only reached loopback. Version 0.4.108 contains an updated fix.

• CWE-918

• https://github.com/advisories/GHSA-3xm7-qw7j-qc8v
• https://github.com/advisories/GHSA-g84h-j7jj-x32p
• https://github.com/ondata/ckan-mcp-server/commit/bb7439b553b9f965adc3d43bcd415c42eebe2f40
• https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.108
• https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-798p-78g2-v556

Published

Sep 21, 2026

Last Modified

Sep 24, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-61605Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-61606Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-61607Grav API Plugin is a RESTful API for Grav CMS that provides …4.6
• CVE-2026-61608SolidInvoice is an open-source invoicing platform. Prior to …6.8
• CVE-2026-61609Pterodactyl is a free, open-source game server management pa…7.5
• CVE-2026-6161A vulnerability was determined in code-projects Simple ChatB…7.3
• CVE-2026-61613Cursor is a code editor built for programming with AI. Prior…7.7
• CVE-2026-61614SolidInvoice is an open-source invoicing platform. Prior to …5.9
• CVE-2026-61617Wings is the server control plane for the Pterodactyl game-s…7.7
• CVE-2026-6162A vulnerability has been found in PHPGurukul Company Visitor…3.5
• CVE-2026-61625VictoriaMetrics is a scalable solution for monitoring and ma…6.8
• CVE-2026-61628nginx ignition is a user interface for the nginx web server.…8.1