CVE-2026-73845 CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)
An attacker can bypass server allowlist validation to target arbitrary hosts, potentially reading sensitive data or receiving spoofed responses.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-73845?
CVE-2026-73845 is a medium-severity server-side request forgery vulnerability in ondata ckan-mcp-server, published on 14 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckan_get_mqa_quality and ckan_get_mqa_quality_details tools in src/tools/quality.ts use isValidMqaServer to validate the server_url parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host and URL-userinfo values to target an attacker-controlled host and return a spoofed response. This issue is fixed in version 0.4.112.
Which versions are affected by CVE-2026-73845?
2 open source packages ship an affected version, including @aborruso/ckan-mcp-server.
| Package | Affected | Fixed in |
|---|---|---|
@aborruso/ckan-mcp-server npm | All versions | 0.4.112 |
@aborruso/ckan-mcp-server npm | All versions | 0.4.112 |
How do I fix CVE-2026-73845?
Upgrade @aborruso/ckan-mcp-server to 0.4.112 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-73845 being exploited?
There is no known exploitation of CVE-2026-73845 in the wild and no public exploit code.
Sources
Also known as GHSA-83x6-42hr-jc76.