CVE-2026-61612Patch

LOWCVSS 5.7 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to version 0.4.108, the SSRF guard `validateServerUrl` (added for CVE-2026-33060, extended for CVE-2026-53509) validates only the hostname string and never resolves DNS. Any caller-supplied `server_url` whose hostname *resolves* to an internal address passes the guard, so the server issues requests to loopback and cloud metadata (`169.254.169.254`). This is a third bypass of the same guard, and it reaches IMDS — strictly more than CVE-2026-53509, which only reached loopback. Version 0.4.108 contains an updated fix.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 2 signals
Peaked 1d ago at 1 mentions (2026-09-21); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Patch

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters31d
Patch
CVE-2026-61612 SSRF in CKAN MCP Server, CVSS 5.7. Third bypass of the same guard, reaches cloud metadata at 169.254.169.254. Patched in 0.4.108, update now. https://www.valtersit.com/cve/CVE-2026-61612 #CVE #infosec #cybersecurity #Advisories #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
Post summary
The tweet discloses an SSRF vulnerability (CVSS 5.7) in CKAN MCP Server that can bypass a guard to access cloud metadata, and notes that version 0.4.108 patches it, urging immediate updates.
1000079
1.0K followersView on X
CVE@CVEnew47d
Patch
CVE-2026-61612 CKAN MCP Server is a tool for querying CKAN open data portals. Prior to version 0.4.108, the SSRF guard `validateServerUrl` (added for CVE-2026-33060, extended for CV… https://www.cve.org/CVERecord?id=CVE-2026-61612
Post summary
The text briefly discloses CVE-2026-61612 as an SSRF issue in CKAN MCP Server and indicates version 0.4.108 as the remediated/fixed version, but provides limited technical depth due to truncation.
000001.2K
58.1K followersView on X

Explore more

Back to dashboard