The vulnerability is a server‑side request forgery within the model download pathway of Amazon Web Services Multi Model Server. A remote attacker can supply a crafted model URL that directs the server to fetch resources from internal network hosts. This allows the attacker to probe and potentially exploit services behind the host, bypassing network perimeter defenses. The weakness is classified as CWE‑918.

The flaw affects AWS Multi Model Server releases 1.1.11 and earlier. Those installations are marked end‑of‑life and no patch or newer version addresses the issue. Therefore any environment still running those versions remains exposed.

The CVSS score of 6.9 indicates a moderate severity. The EPSS score is not available, so the exploitation likelihood is unknown, but because the service is still active in some deployments and the flaw permits internal traffic, the risk can be significant. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is that a remote actor sending a crafted request to the model‑download endpoint can cause the server to reach internal destinations. Prompt action is required.