CVE-2026-112408

EUVD-2026-107541

21.10.2026, 20:17

Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably named S3 bucket that the SDK uses without ownership validation.



To remediate this issue, users should upgrade to Amazon SageMaker Python SDK 3.10.0 (V3) or 2.257.3 (V2).

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.1 HIGH	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Common Weakness Enumeration

CWE-940 - Improper Verification of Source of a Communication Channel
The software establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.

References

https://aws.amazon.com/security/security-bulletins/2026-142-aws/

https://github.com/aws/sagemaker-python-sdk/releases/tag/v2.257.3

https://github.com/aws/sagemaker-python-sdk/releases/tag/v3.10.0

https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-5rx8-8fr2-f855

https://pypi.org/project/sagemaker/2.257.3/

https://pypi.org/project/sagemaker/3.10.0/