tag: SSRF

Strands Agents' elasticsearch_memory tool (versions < 0.7.0) has a nasty SSRF vulnerability that can leak your Elasticsearch API keys. The LLM can control connection parameters and trick the tool into sending credentials to attacker-controlled servers. If you're running affected versions, update immediately—this one requires action.

AWS HealthLake MCP Server versions before 0.0.14 have a critical SSRF flaw (CVE-2026-15643) in pagination handling. Attackers can exploit unvalidated next_token parameters to redirect requests and steal AWS credentials. **Action required**: upgrade to version 0.0.14 or later immediately if you're running this service.