AWS CloudAWS HealthLake MCP Server SSRF Flaw Exposes IAM Credentials and Healthcare Data
ThreatsCloud & SaaSCVE-2026-15643High
AWS discloses high-severity SSRF flaw CVE-2026-15643 in the HealthLake MCP server, enabling attackers to leak temporary SigV4 IAM credentials and healthcare FHIR records.
Priya Raman17 min read