PT-2026-41117 · Amazon · Sagemaker-Python-Sdk

Published 2026-05-14 · Updated 2026-05-21 · CVE-2026-8596

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Amazon SageMaker Python SDK versions prior to 2.257.2 Amazon SageMaker Python SDK versions prior to 3.8.0

Description The ModelBuilder/Serve component stores sensitive information in cleartext. A remote authenticated actor with permissions to call SageMaker describe APIs and S3 write access to the model artifact path could extract the HMAC (Hash-based Message Authentication Code, a mechanism for verifying both the data integrity and the authenticity of a message) signing key from SageMaker API responses. This could allow the actor to forge valid integrity signatures for specially crafted model artifacts, leading to code execution in inference containers.

Recommendations Upgrade to version 2.257.2 and rebuild any models previously created with ModelBuilder. Upgrade to version 3.8.0 and rebuild any models previously created with ModelBuilder.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2026-8596

GHSA-7HH5-PRP2-MFH5

Affected Products

Sagemaker-Python-Sdk

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8596.json · Exploit
• https://github.com/aws/sagemaker-python-sdk/releases/tag/v2.257.2 · Patch
• https://github.com/aws/sagemaker-python-sdk/releases/tag/v3.8.0 · Patch
• https://osv.dev/vulnerability/GHSA-7hh5-prp2-mfh5 · Vendor Advisory
• https://aws.amazon.com/security/security-bulletins/2026-031-aws · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-8596 · Security Note
• https://osv.dev/vulnerability/CVE-2026-8596 · Vendor Advisory
• https://github.com/aws/sagemaker-python-sdk · Note
• https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-7hh5-prp2-mfh5 · Note
• https://t.me/CVEtracker/53827 · Telegram Post
• https://twitter.com/f1tym1/status/2055123450281263520 · Twitter Post