Executive brief
A vulnerability exists in the AEM MCP Server, a tool used to manage Adobe Experience Manager (AEM) content. An attacker can trick the server into making unauthorized requests to internal or external web addresses. This could allow an attacker to scan internal networks, access sensitive data from other internal services, or disrupt operations.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability (CWE-918) exists in the getAssetMetadata function within src/mcp-server.ts. The application accepts a user-controlled assetPath argument and passes it to an Axios GET request without validating it against allowed AEM content roots. By providing a crafted absolute or protocol-relative URL (e.g., //127.0.0.1), a remote attacker with low privileges can force the server to perform outbound requests to arbitrary internal or external hosts. This can be used to probe internal network services or bypass firewalls. As of the advisory date, no official patch has been released by the maintainer.
Affected products
- indrasishbanerjee aem-mcp-server up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583
Timeline
- 2026-04-20: other: Vulnerability reported to vendor
- 2026-05-11: disclosed: Public issue report created on GitHub
- 2026-06-01: advisory: NVD publication date