Which versions of AWS are affected by CVE-2026-15643?

Organizations deploying AWS awslabs.healthlake-mcp-server (versions before 0.0.14) for healthcare data management face patient record breach risk; authenticated users can exploit server-side request…. A patch is available.

How to fix or mitigate CVE-2026-15643?

Within 24 hours, inventory all systems running awslabs.healthlake-mcp-server prior to version 0.0.14 and disable or isolate the service. Within 7 days, implement network controls restricting outbound HealthLake API calls to legitimate AWS endpoints only, rotate AWS credentials used by the affected component, and enable detailed logging of all SigV4-signed requests for anomalies. Within 30 days, maintain these interim controls while actively monitoring AWS labs repositories for patch availability (target: version 0.0.14+); review all AWS API call logs from the vulnerability period to identify potential unauthorized access to patient records.

AWS CVE-2026-15643

Q: What is the CVSS score of CVE-2026-15643?

CVE-2026-15643 has a CVSS 4.0 base score of 9.2 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-44455 CRITICAL

Server-Side Request Forgery (SSRF) (CWE-918)

2026-07-14 AMZN

SSRF AWS Awslabs Healthlake Mcp Server

9.2

CVSS 4.0 · Vendor: AMZN

Severity by source

Vendor (AMZN) PRIMARY

9.2 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (AMZN) · only source for this CVE.

CVSS VectorVendor: AMZN

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Scope

Lifecycle Timeline

Patch available

Jul 14, 2026 - 23:20 EUVD

Analysis Generated

Jul 14, 2026 - 21:24 vuln.today

CVE Published

Jul 14, 2026 - 20:03 cve.org

CRITICAL 9.2

DescriptionCVE.org

AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. A server-side request forgery in the pagination handling component in AWS awslabs.healthlake-mcp-server before 0.0.14 on all platforms might allow a remote authenticated user to exfiltrate AWS temporary security credentials to an arbitrary endpoint via a crafted next_token parameter. The server does not validate that pagination URLs point back to the expected HealthLake endpoint, allowing an actor to redirect subsequent requests to an actor-controlled server.

Its recommended to upgrade to version 0.0.14 or later.

AnalysisAI

Server-side request forgery in AWS awslabs.healthlake-mcp-server before 0.0.14 lets a remote authenticated user exfiltrate AWS temporary security credentials to an attacker-controlled endpoint by supplying a crafted next_token pagination parameter. Because the server never validates that paginated request URLs still point at the legitimate HealthLake FHIR datastore, subsequent authenticated calls (carrying SigV4/temporary credentials) can be redirected off-host. Rated CVSS 4.0 9.2 (critical); no public exploit identified at time of analysis and not listed in CISA KEV.