An authentication bypass flaw exists in CKAN's datastore_search_sql function that allows attackers to construct arbitrary SQL queries against the underlying PostgreSQL database. The vulnerability, categorized as CWE-863, permits a malicious actor to read and potentially modify private resources without possessing valid credentials. The impact includes leaking sensitive data, exposing system configuration details, and compromising the confidentiality and integrity of the data hub.

The flaw affects CKAN versions prior to 2.10.10 and 2.11.5. Users running those releases, regardless of deployment environment, are susceptible unless additional controls are in place. The affected product is the CKAN data management system developed by the CKAN community.

The CVSS score is 6.7, indicating moderate severity. No EPSS score is available, and the vulnerability is not listed in CISA KEV, suggesting it has not yet been widely exploited in the wild. The likely attack vector is through the unauthenticated datastore_search_sql API endpoint, which, if exposed, enables attackers to inject and execute SQL. Successful exploitation appears straightforward for anyone who can reach the endpoint, making it important to remediate promptly.