{"data":{"id":"5ce565ab-0c5d-498f-ae74-80e0a22a9bfe","title":"GHSA-vqff-r82h-9crc: ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin \"*\" (out)","summary":"The ckan-mcp-server DataStore Table UI resource, rendered as an MCP Apps iframe in src/resources/datastore-table-ui.ts, accepts window message events without checking event.origin and sends outbound postMessage calls with target origin '*'. Any frame that can reach the document can inject fabricated fields or records, including phishing links, and can spoof responses to pending MCP requests such as ui/initialize. The advisory rates this Low because exploitation depends on the host embedding model, and it is framed as a hardening issue.","solution":"Validate event.origin against the expected host origin on every inbound message and drop messages from other origins. Send outbound postMessage calls with an explicit target origin, the host origin established at initialize time, instead of '*'. Optionally bind the channel to a nonce or identifier established during ui/initialize so that only the negotiated host can drive the panel.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-vqff-r82h-9crc","publishedAt":"2026-10-16T19:23:48.000Z","cveId":"CVE-2026-76894","cweIds":null,"cvssScore":null,"cvssSeverity":"low","severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@aborruso/ckan-mcp-server@< 0.4.112 (fixed: 0.4.112)"],"affectedPackageNames":["@aborruso/ckan-mcp-server"],"affectedPackageRefs":["npm:@aborruso/ckan-mcp-server"],"affectedVendors":[],"affectedVendorsRaw":["ckan-mcp-server","MCP Apps"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-17T00:08:52.738Z","kevDateAdded":null,"advisoryAliases":["GHSA-vqff-r82h-9crc"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-10-16T19:23:48.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}