A vulnerability was found in the getAssetMetadata function of the aem‑mcp‑server project. The function accepts an assetPath argument that is passed unchanged to Axios to fetch a resource. An attacker can supply a crafted assetPath that causes the server to issue an HTTP request to an arbitrary host chosen by the attacker. This is a classic server‑side request forgery (SSRF). The SSRF can allow the attacker to read internal API responses, reach protected services, or exhaust network resources. The payload is delivered entirely from a remote web request, so an attacker with network access to the host running the server can trigger it without any local code execution on the server. The impact therefore is potential data exfiltration or privilege escalation within the internal network.

The affected product is the open‑source aem‑mcp‑server repository maintained by indrasishbanerjee. The official identifiers list the component as aem‑mcp‑server, and the vulnerability exists in all code reachable before the commit b5f833aef9b5dfd17a5991b3b18a8a11edbdc583. The project does not maintain a versioning scheme, making it difficult to map the vulnerability to a specific release. Users relying on the default distribution of the repository should assume the code presently in use is affected until an upstream fix is released.

According to the CVSS, the problem scores 5.3, representing moderate risk. The exploit is exploitable over the network, and the public disclosure means tools or scripts can be found to leverage it, yet no EPSS data is available and the vulnerability is not listed in the CISA KEV catalog. Because the vulnerability is implemented in a public‑facing API, the likelihood of exploitation in the wild depends on how broadly the server is exposed. An attacker who can interact with the API can submit a crafted assetPath and force the server to reach arbitrary destinations, potentially obtaining sensitive internal data or service information. If the server has unrestricted outbound access, the SSRF could also be used to pivot to other internal hosts.