Sensitive Information Exposure in Amazon SageMaker Python SDK

CVE-2026-8596

What is CVE-2026-8596?

The Amazon SageMaker Python SDK prior to certain versions allows for cleartext storage of sensitive data within its ModelBuilder and Serve components. This vulnerability can be exploited by a remote authenticated user who has permissions to invoke the SageMaker describe APIs and write to specific S3 paths related to model artifacts. Through this flaw, the attacker could potentially extract the HMAC signing key from API responses. With this key, they can forge valid integrity signatures for manipulated model artifacts, leading to unauthorized code execution in inference containers. To mitigate this risk, it is crucial for users to upgrade to version 2.257.2 or later for v2 and version 3.8.0 or later for v3, and recreate any impacted models.

References