Amazon SageMaker Python SDK vulnerabilities

3 known vulnerabilities in Amazon SageMaker Python SDK from AWS. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Amazon SageMaker Python SDK: Improper Verification of Source of a Communication Channel

  CVE-2026-112408Oct 21, 2026AWS

  Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment a

• 7.2 High severity

  Amazon SageMaker Python SDK: Improper Validation of Integrity Check Value

  CVE-2026-8597May 14, 2026AWS

  Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to achieve code execution in inference containers via replacement of model artifacts

• 7.2 High severity

  Amazon SageMaker Python SDK: Cleartext Storage of Sensitive Information

  CVE-2026-8596May 14, 2026AWS

  Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to extract the HMAC signing key from SageMaker API responses and forge v