CVE-2026-61612 | ondata Ckan Mcp Server up to 0.4.107 SSRF Guard validateServerUrl server_url server-side request forgery

September 21, 2026 Yanac

A vulnerability has been found in ondata Ckan Mcp Server up to 0.4.107 and classified as problematic. Affected is the function validateServerUrl of the component SSRF Guard. This manipulation of the argument server_url causes server-side request forgery.

This vulnerability is tracked as CVE-2026-61612. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More