CVE-2026-15643

AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. A server-side request forgery in the pagination handling component in AWS awslabs.healthlake-mcp-server before 0.0.14 on all platforms might allow a remote authenticated user to exfiltrate AWS temporary security credentials to an arbitrary endpoint via a crafted next_token parameter. The server does not validate that pagination URLs point back to the expected HealthLake endpoint, allowing an actor to redirect subsequent requests to an actor-controlled server. Its recommended to upgrade to version 0.0.14 or later.

Score

CVSS 4.0 9.2 Critical

Status

Awaiting Analysis - ff89ba41-3aa1-4d27-914a-91399e9639e5

Published

2026-07-14

Last modified

2026-10-24

Weaknesses

CWE-918

Affected products

• Awslabs.healthlake-mcp-server (Aws)

References

• https://pypi.org/project/awslabs.healthlake-mcp-server/0.0.14/
• https://aws.amazon.com/security/security-bulletins/2026-054-aws/