Vulnerability Description
Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably named S3 bucket that the SDK uses without ownership validation. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK 3.10.0 (V3) or 2.257.3 (V2).
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://aws.amazon.com/security/security-bulletins/2026-142-aws/
- https://github.com/aws/sagemaker-python-sdk/releases/tag/v2.257.3
- https://github.com/aws/sagemaker-python-sdk/releases/tag/v3.10.0
- https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-5rx8-8fr2-f
- https://pypi.org/project/sagemaker/2.257.3/
- https://pypi.org/project/sagemaker/3.10.0/
FAQ
What is CVE-2026-112408?
CVE-2026-112408 is a vulnerability with a CVSS score of 8.1 (HIGH). Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve co...
How severe is CVE-2026-112408?
CVE-2026-112408 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-112408?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.