Skip to content
fr Sign in
8.1 High

CVE-2026-112408 Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python…

Description

Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably named S3 bucket that the SDK uses without ownership validation. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK 3.10.0 (V3) or 2.257.3 (V2).

Affected products and versions

Product Affected versions Fixed in
Amazon SageMaker Python SDK 3.0 3.0.0 → < 3.10.0 3.10.0
Amazon SageMaker Python SDK 2.257 earliest → < 2.257.3 2.257.3

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Amazon SageMaker Python SDK

The 3 CVEs of Amazon SageMaker Python SDK →
CVE-2026-8597 Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and… 7.2 High CVE-2026-8596 Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker Python SDK before… 7.2 High
Track this CVE