CVE-2026-15643 - AWS HealthLake MCP Server SSRF via Unvalidated Pagination URL

Summary

CVE-2026-15643 is a server-side request forgery in the pagination handling of the awslabs.healthlake-mcp-server (AWS HealthLake MCP Server) before 0.0.14, on all platforms. A remote authenticated user can craft a next_token parameter so that the server does not validate the pagination URL against the expected HealthLake endpoint, redirecting requests to an actor-controlled server and exfiltrating AWS temporary security credentials.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Model Context Protocol

Related items

• HighCVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRFSame vendor · AWS Security Bulletins
• HighCVE-2026-104019 - OS command injection in the Studio Space startup script in Amazon SageMaker DistributionSame vendor · AWS Security Bulletins
• CriticalCVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWSSame vendor · AWS Security Bulletins
• HighCVE-2026-97662 - Argument injection in AWS security-agent-mcp-server diff scanSame vendor · AWS Security Bulletins
• HighGHSA-6v3r-4p5c-mrp5: Language Servers for AWS vulnerable to arbitrary file writeSame vendor · GitHub Advisory Database