CVE-2026-53509

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53509", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-09T17:05:25.060Z", "datePublished": "2026-08-21T21:21:20.897Z", "dateUpdated": "2026-08-21T21:42:22.500Z"}, "containers": {"cna": {"title": "@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)", "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-g84h-j7jj-x32p", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-g84h-j7jj-x32p"}, {"name": "https://github.com/advisories/GHSA-3xm7-qw7j-qc8v", "tags": ["x_refsource_MISC"], "url": "https://github.com/advisories/GHSA-3xm7-qw7j-qc8v"}, {"name": "https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.106", "tags": ["x_refsource_MISC"], "url": "https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.106"}], "affected": [{"vendor": "ondata", "product": "ckan-mcp-server", "versions": [{"version": "< 0.4.106", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-21T21:21:20.897Z"}, "descriptions": [{"lang": "en", "value": "CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that accept a base_url parameter had the risk of making HTTP requests to arbitrary endpoints without restriction. A fix was applied to filter out ip addresses. However, a method to bypass exists prior to version 0.4.106. CKAN MCP Server validates caller-supplied CKAN server URLs by inspecting only the parsed hostname string before issuing outbound HTTP requests. In `src/utils/http.ts`, hostname aliases such as `ip6-localhost` are not equal to `localhost`, are not dotted IPv4 literals, and are not bracketed IPv6 literals, so they pass the SSRF filter but can resolve to loopback when the server performs the request. A remote MCP caller that can invoke CKAN tools with a `server_url` can therefore make the server connect to local or private addresses and, for CKAN-shaped responses, receive response-derived data. The updated fix in version 0.4.106 replaced the single `hostname === 'localhost'` check with a blocked-hostname `Set` covering `ip6-localhost` and `ip6-loopback`."}], "source": {"advisory": "GHSA-g84h-j7jj-x32p", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-21T21:35:04.552283Z", "id": "CVE-2026-53509", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-21T21:42:22.500Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53509", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-09T17:05:25.060Z", "datePublished": "2026-08-21T21:21:20.897Z", "dateUpdated": "2026-08-21T21:42:22.500Z"}, "containers": {"cna": {"title": "@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)", "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-g84h-j7jj-x32p", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-g84h-j7jj-x32p"}, {"name": "https://github.com/advisories/GHSA-3xm7-qw7j-qc8v", "tags": ["x_refsource_MISC"], "url": "https://github.com/advisories/GHSA-3xm7-qw7j-qc8v"}, {"name": "https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.106", "tags": ["x_refsource_MISC"], "url": "https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.106"}], "affected": [{"vendor": "ondata", "product": "ckan-mcp-server", "versions": [{"version": "< 0.4.106", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-21T21:21:20.897Z"}, "descriptions": [{"lang": "en", "value": "CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that accept a base_url parameter had the risk of making HTTP requests to arbitrary endpoints without restriction. A fix was applied to filter out ip addresses. However, a method to bypass exists prior to version 0.4.106. CKAN MCP Server validates caller-supplied CKAN server URLs by inspecting only the parsed hostname string before issuing outbound HTTP requests. In `src/utils/http.ts`, hostname aliases such as `ip6-localhost` are not equal to `localhost`, are not dotted IPv4 literals, and are not bracketed IPv6 literals, so they pass the SSRF filter but can resolve to loopback when the server performs the request. A remote MCP caller that can invoke CKAN tools with a `server_url` can therefore make the server connect to local or private addresses and, for CKAN-shaped responses, receive response-derived data. The updated fix in version 0.4.106 replaced the single `hostname === 'localhost'` check with a blocked-hostname `Set` covering `ip6-localhost` and `ip6-loopback`."}], "source": {"advisory": "GHSA-g84h-j7jj-x32p", "discovery": "UNKNOWN"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-53509", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-21T21:35:04.552283Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-21T21:35:09.141Z"}}]}}

{"affected": [{"affectedData": [{"product": "ckan-mcp-server", "vendor": "ondata", "versions": [{"status": "affected", "version": "< 0.4.106"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that accept a base_url parameter had the risk of making HTTP requests to arbitrary endpoints without restriction. A fix was applied to filter out ip addresses. However, a method to bypass exists prior to version 0.4.106. CKAN MCP Server validates caller-supplied CKAN server URLs by inspecting only the parsed hostname string before issuing outbound HTTP requests. In `src/utils/http.ts`, hostname aliases such as `ip6-localhost` are not equal to `localhost`, are not dotted IPv4 literals, and are not bracketed IPv6 literals, so they pass the SSRF filter but can resolve to loopback when the server performs the request. A remote MCP caller that can invoke CKAN tools with a `server_url` can therefore make the server connect to local or private addresses and, for CKAN-shaped responses, receive response-derived data. The updated fix in version 0.4.106 replaced the single `hostname === 'localhost'` check with a blocked-hostname `Set` covering `ip6-localhost` and `ip6-loopback`."}, {"lang": "es", "value": "El Servidor CKAN MCP es una herramienta para consultar portales de datos abiertos CKAN. Una vulnerabilidad conocida CVE-2026-33060 indicaba que herramientas, incluyendo ckan_package_search y sparql_query, que aceptan un par\u00e1metro base_url, ten\u00edan el riesgo de realizar solicitudes HTTP a puntos finales arbitrarios sin restricci\u00f3n. Se aplic\u00f3 una correcci\u00f3n para filtrar direcciones IP. Sin embargo, existe un m\u00e9todo para eludirlo anterior a la versi\u00f3n 0.4.106. El Servidor CKAN MCP valida las URL de los servidores CKAN proporcionadas por el llamador inspeccionando solo la cadena de nombre de host analizada antes de emitir solicitudes HTTP salientes. En 'src/utils/http.ts', alias de nombre de host como 'ip6-localhost' no son iguales a 'localhost', no son literales IPv4 con puntos y no son literales IPv6 entre corchetes, por lo que pasan el filtro SSRF pero pueden resolverse a loopback cuando el servidor realiza la solicitud. Un llamador MCP remoto que puede invocar herramientas CKAN con una 'server_url' puede, por lo tanto, hacer que el servidor se conecte a direcciones locales o privadas y, para respuestas con formato CKAN, recibir datos derivados de la respuesta. La correcci\u00f3n actualizada en la versi\u00f3n 0.4.106 reemplaz\u00f3 la \u00fanica verificaci\u00f3n 'hostname === 'localhost'' con un 'Set' de nombres de host bloqueados que cubre 'ip6-localhost' y 'ip6-loopback'."}], "id": "CVE-2026-53509", "lastModified": "2026-10-12T16:10:00.220", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-53509", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-21T21:35:04.552283Z", "version": "2.0.3"}}]}, "published": "2026-08-21T22:16:38.993", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/advisories/GHSA-3xm7-qw7j-qc8v"}, {"source": "security-advisories@github.com", "url": "https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.106"}, {"source": "security-advisories@github.com", "url": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-g84h-j7jj-x32p"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "security-advisories@github.com", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.4.106)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "ckan-mcp-server", "source": "cna", "vendor": "ondata"}, "product": "ckan-mcp-server", "vendor": "ondata"}], "created": "2026-08-21T22:45:04.445095+00:00", "updated": "2026-08-21T22:45:04.682498+00:00", "vendors": ["ondata", "ondata$PRODUCT$ckan-mcp-server"]}