CVE-2026-15643

Awaiting Analysis Awaiting Analysis - Queue

Server-Side Request Forgery in AWS HealthLake MCP Server

Publication date: 2026-07-14

Last updated on: 2026-07-15

Assigner: AMZN

Description

AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. A server-side request forgery in the pagination handling component in AWS awslabs.healthlake-mcp-server before 0.0.14 on all platforms might allow a remote authenticated user to exfiltrate AWS temporary security credentials to an arbitrary endpoint via a crafted next_token parameter. The server does not validate that pagination URLs point back to the expected HealthLake endpoint, allowing an actor to redirect subsequent requests to an actor-controlled server. Its recommended to upgrade to version 0.0.14 or later.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-15643

Affected Vendors & Products

Vendor	Product	Version / Range
awslabs	healthlake-mcp-server	From 0.0.14 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

This vulnerability is a server-side request forgery (SSRF) in the AWS HealthLake MCP Server's pagination handling. It allows a remote authenticated user to exfiltrate AWS temporary security credentials to an arbitrary endpoint by manipulating the next_token parameter. The server fails to validate that pagination URLs point back to the expected HealthLake endpoint, enabling redirection to an attacker-controlled server.

Detection Guidance

Detecting this vulnerability requires monitoring for unusual network requests or exfiltration attempts. Check server logs for requests containing crafted next_token parameters or redirects to external endpoints. No specific commands are provided in the context.

Impact Analysis

An attacker could steal AWS temporary security credentials, potentially gaining unauthorized access to AWS resources or data. This could lead to data breaches, unauthorized modifications, or further lateral movement within AWS environments if the stolen credentials have sufficient permissions.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's security requirements. Organizations may face compliance violations, legal penalties, and reputational damage if such breaches occur due to inadequate security controls.

Mitigation Strategies

Upgrade to version 0.0.14 or later of AWS HealthLake MCP Server immediately to address the server-side request forgery vulnerability. Ensure all instances are updated to prevent credential exfiltration.

Hi! I’m here to help you understand CVE-2026-15643. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70