CVE-2026-42031: Ckan Check Access Bypass Via Whitelist
An authorization check (check_access) is gated behind a "not in <allowlist>" conditional. Resources whose identifier is in the allowlist bypass the authorization check entirely. This pattern was the root cause of CVE-2026-42031 in CKAN's datastore_search, where the WHITELISTED_RESOURCES shortcut allowed enumeration of private resources via _table_metadata an
Pythongreprules fetch cve-2026-42031-ckan-check-access-bypass-via-whitelist --engine opengrepDescription
An authorization check (check_access) is gated behind a "not in <allowlist>" conditional. Resources whose identifier is in the allowlist bypass the authorization check entirely. This pattern was the root cause of CVE-2026-42031 in CKAN's datastore_search, where the WHITELISTED_RESOURCES shortcut allowed enumeration of private resources via _table_metadata an
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.