THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-6f9w-9hf2-5rg3 (low) — CKAN MCP Server: Information disclosure via verbose error reflection

[GHSA] GHSA-6f9w-9hf2-5rg3 (low) — CKAN MCP Server: Information disclosure via verbose error reflection

medgithub_advisoriesPublished 2026-09-03

GHSA-6f9w-9hf2-5rg3 Severity: low CVE: CVE-2026-73844

CKAN MCP Server: Information disclosure via verbose error reflection

## Summary

Error paths reflect raw upstream response bodies and internal exception messages back to the caller instead of a sanitized, generic message. When the server is pointed at (or redirected/SSRF'd to) a host that returns a non-CKAN response, or when an internal excep

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-73844cve

Original source: https://github.com/advisories/GHSA-6f9w-9hf2-5rg3