Skip to content
OpenAdvisories

Product · AWS

Amazon SageMaker Python SDK

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-112408

    Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

    Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment …

    AWS Amazon SageMaker Python SDK
  • High 7.2
    CVE-2026-8597

    Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDK

    Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to achieve code execution in inference containers via replacement of model artifacts…

    AWS Amazon SageMaker Python SDK sagemaker PyPI
  • High 7.2
    CVE-2026-8596

    Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path

    Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to extract the HMAC signing key from SageMaker API responses and forge …

    AWS Amazon SageMaker Python SDK sagemaker PyPI