CVE-2026-112408
Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably named S3 bucket that the SDK uses without ownership validation. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK 3.10.0 (V3) or 2.257.3 (V2).
| CWE | CWE-940 |
| Vendor | aws |
| Product | amazon sagemaker python sdk |
| Published | Oct 21, 2026 |
| Last Updated | Oct 21, 2026 |
Stay Ahead of the Next One
Get instant alerts for aws amazon sagemaker python sdk
Be the first to know when new high vulnerabilities affecting aws amazon sagemaker python sdk are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
AWS / Amazon SageMaker Python SDK
0 < 2.257.3 3.0.0 < 3.10.0
References
github.com: https://github.com/aws/sagemaker-python-sdk/releases/tag/v2.257.3 github.com: https://github.com/aws/sagemaker-python-sdk/releases/tag/v3.10.0 pypi.org: https://pypi.org/project/sagemaker/3.10.0/ pypi.org: https://pypi.org/project/sagemaker/2.257.3/ aws.amazon.com: https://aws.amazon.com/security/security-bulletins/2026-142-aws/ github.com: https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-5rx8-8fr2-f855
Credits
Upwind Security