# CVE-2026-73845

## Summary

- **CVE ID:** CVE-2026-73845
- **Severity:** MEDIUM
- **CVSS Score:** 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
- **CWE:** CWE-625, CWE-20, CWE-918
- **Published:** Aug 14, 2026
- **Last Modified:** Aug 14, 2026

## Description

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckan_get_mqa_quality and ckan_get_mqa_quality_details tools in src/tools/quality.ts use isValidMqaServer to validate the server_url parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host and URL-userinfo values to target an attacker-controlled host and return a spoofed response. This issue is fixed in version 0.4.112.

## Affected Products

- ondata — ckan-mcp-server (< 0.4.112)

## References

- [CNA](https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-83x6-42hr-jc76)
- [CNA](https://github.com/ondata/ckan-mcp-server/commit/8e1522f9bbfa1f3b21550f17887f60f133e24151)
- [CNA](https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.112)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.22%
- **EPSS Percentile:** 13.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._