CVE-2026-112408
CRITICAL
9,4
Source: ff89ba41-3aa1-4d27-914a-91399e9639e5
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
HIGH
8,1
Source: ff89ba41-3aa1-4d27-914a-91399e9639e5
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably named S3 bucket that the SDK uses without ownership validation.
To remediate this issue, users should upgrade to Amazon SageMaker Python SDK 3.10.0 (V3) or 2.257.3 (V2).
940
Improper Verification of Source of a Communication Channel
IncompleteCommon Consequences
Security Scopes Affected:
Access Control
Other
Potential Impacts:
Gain Privileges Or Assume Identity
Varies By Context
Bypass Protection Mechanism
Applicable Platforms
Technologies:
Mobile
https://aws.amazon.com/security/security-bulletins/2026-142-aws/
https://github.com/aws/sagemaker-python-sdk/releases/tag/v2.257.3
https://github.com/aws/sagemaker-python-sdk/releases/tag/v3.10.0
https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-5rx8-8fr2-…
https://pypi.org/project/sagemaker/2.257.3/
https://pypi.org/project/sagemaker/3.10.0/