Source Verification Flaw in Amazon SageMaker Python SDK
CVE-2026-112408

9.4CRITICAL

Key Information:

Vendor

Aws

Status
Amazon Sagemaker Python Sdk
Vendor
CVE Published:
21 October 2026

What is CVE-2026-112408?

A security vulnerability in the Amazon SageMaker Python SDK allows incomplete verification of the communication channel's source within the default_bucket() function. This weakness can permit remote attackers to execute arbitrary code in the target SageMaker execution environment. By pre-creating an S3 bucket with a predictable name that the SDK utilizes, unauthorized actors may gain access to sensitive IAM credentials. Users are strongly encouraged to update to Amazon SageMaker Python SDK version 3.10.0 or 2.257.3 to safeguard against this issue.

Affected Version(s)

Amazon SageMaker Python SDK 0 < 2.257.3

Amazon SageMaker Python SDK 3.0.0 < 3.10.0

References

https://github.com/aws/sagemaker-python-sdk/releases/tag/...
release-notespatch
https://github.com/aws/sagemaker-python-sdk/releases/tag/...
release-notespatch
https://pypi.org/project/sagemaker/3.10.0/
release-notespatch

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Upwind Security
.