Relative Path Traversal Vulnerability in Amazon Braket SDK

CVE-2026-124034

What is CVE-2026-124034?

The Amazon Braket SDK is impacted by a relative path traversal vulnerability that affects versions earlier than 1.127.7. This flaw could permit a remote authenticated user with S3 write permissions to exploit the hybrid job's input data directory. By leveraging crafted S3 object keys, the attacker might overwrite arbitrary files with the execution privileges of the user running the job, leading to potential data breaches or system compromises. Upgrading to version 1.127.7 or later is crucial for mitigating this security issue.

References