CVE-2026-61612: CKAN MCP Server's SSRF guard gets bypassed a third time and now reaches cloud metadata
NVD·medium signal
Published 2026-09-21 at CVSS 5.7, this is the third bypass of the same validateServerUrl guard in CKAN MCP Server, after CVE-2026-33060 and CVE-2026-53509. The guard checks the hostname string and never resolves DNS, so any caller-supplied server_url whose hostname resolves to an internal address passes and the server fetches loopback and [redacted]. Fixed in 0.4.108. The lesson is mechanical: string-matching a hostname is not an SSRF control, and two prior patches to the same function did not change that.