CVE-2026-76894
Low · 3.1CVSS
3.1
EPSS
0.2%
Published
Nov 3, 2026
CISA due date
—
The record
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore table UI in src/resources/datastore-table-ui.ts accepts window message events without validating event.origin and sends JSON-RPC messages through postMessage with a wildcard target origin. A frame that can reach the embedded document can inject fabricated fields or records, spoof pending ui/initialize responses, disrupt the MCP UI handshake, or receive outbound messages when the resource is embedded by an untrusted parent. Values are HTML escaped, so the demonstrated content injection is display spoofing rather than script execution, and exploitability depends on the host embedding model. This issue is fixed in version 0.4.112.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2022-30267 Emerson Ovation was found to have no authentication of firmware signing and relies on an… CWE-345
- CVE-2026-121545 Dreeve before 5.8.0 contains a missing authentication vulnerability in… CWE-345
- CVE-2026-119731 Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its… CWE-345
- CVE-2026-103310 The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the… CWE-345
- CVE-2026-120317 http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity check vulnerability… CWE-345
- CVE-2026-63115 ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. CWE-345
- CVE-2026-119289 Zuke is a code-first, strongly typed build automation system for Deno. CWE-345
- CVE-2026-119422 Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that… CWE-345