CVE-2025-47664: Pathling Server Authenticated SSRF, Credential Leakage, and Data Poisoning

Vulnerability Overview Vulnerability Name: $import-pnp operation enables authenticated SSRF, credential leakage, and warehouse data poisoning CVE ID: CVE-2025-47664 Description: Pathling Server's operation accepts a caller-provided and uses it as a remote FHIR Bulk Export client without constraints. When PNP credentials are configured, Pathling constructs an authenticated bulk export client targeting the host selected by the caller, downloads files specified in the manifest, and then imports these staged files as trusted local imports. This bypasses the whitelist that protects the standard operation. Impact Scope Affected Components: , specifically the operation. Relevant Code: (fails to constrain , default is ) and (binds the operator-owned PNP authentication to the URL provided by the caller, and bypasses the staging file import source whitelist). Impact: - Causes Pathling to transmit client credential traffic and authenticated export, status polling, and download requests to attacker-controlled infrastructure (credential leakage and authenticated SSRF). - Injects attacker-selected NDJSON into the warehouse as trusted local input, enabling multi-resource data poisoning. - Replaces existing analytical data using the operator's default of . - Gains server-side external fetch primitives outside of Pathling's network position. Remediation Fixed Version: Pathling Server 2.0.0. Recommendation: Users running version 1.2.0 or earlier should upgrade to 2.0.0. As a pre-upgrade mitigation, disable the operation ( ) or do not configure PNP credentials. Proof of Concept (POC)

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-47664: Pathling Server Authenticated SSRF, Credential Leakage, and Data Poisoning

More from this source