CVE-2026-33060 Details
Description
CKAN MCP Server is a tool for querying CKAN open data portals. Versions prior to 0.4.85 provide tools including ckan_package_search and sparql_query that accept a base_url parameter, making HTTP requests to arbitrary endpoints without restriction. A CKAN portal client has no legitimate reason to contact cloud metadata or internal network services. There is no URL validation on base_url parameter. No private IP blocking (RFC 1918, link-local 169.254.x.x), no cloud metadata blocking. The sparql_query and ckan_datastore_search_sql tools also accept arbitrary base URLs and expose injection surfaces. An attack can lead to internal network scanning, cloud metadata theft (IAM credentials via IMDS at 169.254.169.254), potential SQL/SPARQL injection via unsanitized query parameters. Attack requires prompt injection to control the base_url parameter. This issue has been fixed in version 0.4.85.
A server-side request forgery (SSRF) vulnerability has been identified in CKAN MCP Server versions prior to 0.4.85. The vulnerability arises because tools like 'ckan_package_search' and 'sparql_query' accept a 'base_url' parameter that can be used to make unrestricted HTTP requests to arbitrary endpoints. This lack of validation allows for potential access to internal network services or cloud metadata, including sensitive IAM credentials from the Instance Metadata Service (IMDS) at 169.254.169.254. The vulnerability also exposes injection surfaces that could be exploited via unsanitized query parameters, leading to SQL or SPARQL injection. Exploitation requires prompt injection of malicious content to control the 'base_url' parameter.
Users are advised to update CKAN MCP Server to version 0.4.85 or later. Additionally, implement URL validation for the 'base_url' parameter, block private IP ranges and cloud metadata endpoints, and sanitize SQL input for datastore queries.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 24, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ondata ckan mcp server | < 0.4.85 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 17, 2026 | Initial Analysis | [email protected] |
| Mar 20, 2026 | New CVE Received | [email protected] |