5.9
Moyenne
CVE-2026-1778 Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made…
Description
Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succeed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SageMaker Python SDK 3.1 | premières → < 3.1.1 | 3.1.1 |
| SageMaker Python SDK 2.256 | premières → < 2.256.0 | 2.256.0 |