Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-76894— CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)

Quick assessment

Affected
ondata ckan-mcp-server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

CKAN MCP Server 是一款用于查询 CKAN 开放数据门户的工具。在 0.4.112 版本之前，位于 的 DataStore 表格用户界面（UI）会接收 消息事件，但未对 进行验证；同时，该组件通过 发送 JSON-RPC 消息时使用了通配符作为目标源（target origin）。因此，任何能够访问该嵌入文档的框架（frame）均可注入伪造的字段或记录、伪造待处理的 响应、干扰 MCP UI 握手过程，或在资源被不可信的父页面嵌入时截获出站消息。由于相关值已进行 HTML 转义，因此演示中的内容注入仅

CVSS 3.1 · Low
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-76894

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
Source: CVE Program / CVE List V5
Vulnerability Description
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore table UI in src/resources/datastore-table-ui.ts accepts window message events without validating event.origin and sends JSON-RPC messages through postMessage with a wildcard target origin. A frame that can reach the embedded document can inject fabricated fields or records, spoof pending ui/initialize responses, disrupt the MCP UI handshake, or receive outbound messages when the resource is embedded by an untrusted parent. Values are HTML escaped, so the demonstrated content injection is display spoofing rather than script execution, and exploitability depends on the host embedding model. This issue is fixed in version 0.4.112.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对数据真实性的验证不充分
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
ondata ckan-mcp-server < 0.4.112 -

II. Public POCs for CVE-2026-76894

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-76894

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-76894 (2)

Other References for CVE-2026-76894 (1)

IV. Related Vulnerabilities

Same product: ckan-mcp-server
Same vendor: ondata
Same weakness: CWE-345