Medplum < 5.1.14 SSRF via FHIR Subscription Endpoint
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal network requests by creating FHIR Subscription resources with arbitrary endpoint URLs. Attackers can point subscription endpoints at internal addresses such as cloud instance metadata services, internal databases, or container orchestration endpoints to exfiltrate IAM credentials and patient health records via the POST body containing full FHIR resource payloads.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
- Fix · CNA medplum (medplum) Fixed in 5.1.14
Timeline
- 2026-10-02 Threatist record created from CVE-2026-49120
- 2026-10-03 Alias added: GHSA-w852-7r27-32c6
References
More medplum vulnerabilities
- TI-2026-38748 Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage CVSS 3.1HIGH 7.1
- TI-2026-32440 Medplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurations CVSS 3.1HIGH 8.2
Sources
- CVE-2026-49120 · CVE Program
- CVE-2026-49120 · NVD
- FIRST EPSS
- GHSA-w852-7r27-32c6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences