THREAT OPS › Threat News › [GHSA] GHSA-83x6-42hr-jc76 (medium) — CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)
[GHSA] GHSA-83x6-42hr-jc76 (medium) — CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)
GHSA-83x6-42hr-jc76 Severity: medium CVE: CVE-2026-73845
CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)
## Summary
The `ckan_get_mqa_quality` and `ckan_get_mqa_quality_details` tools restrict their `server_url` argument to `dati.gov.it` via a regular expression. The regex is anchored only at the start and places no boundary after the host, so any URL whos
Indicators of compromise
- CVE-2026-73845cve
- https://dati.gov.it.attacker.com/x`url
- http://dati.gov.it.evil.example/api`url
- https://dati.gov.it@attacker.com/x`url
- https://dati.gov.it/opendataurl
- https://dati.gov.it.attacker.com/xurl
- http://dati.gov.it.evil.example/apiurl
- https://dati.gov.it@attacker.com/xurl
- dati.gov.it@attacker.comemail
Original source: https://github.com/advisories/GHSA-83x6-42hr-jc76