MD5 Hash Collision Vulnerability in SageMaker Workflow by AWS

CVE-2025-0508

What is CVE-2025-0508?

The SageMaker Workflow component of the aws/sagemaker-python-sdk is vulnerable to hash collisions stemming from the MD5 hashing algorithm. This flaw can result in multiple configurations producing identical MD5 hashes, potentially leading to the inadvertent replacement of workflows. Such occurrences can severely compromise the integrity of data processing pipelines, resulting in erroneous outcomes that can affect business operations and data analysis accuracy. Users should be aware of this vulnerability and implement necessary measures to mitigate its impact.

References