CVE-2026-9291
Insecure Deserialization in Amazon Braket SDK Job Results Processing
CVSS Score
7.1
EPSS Score
0.0%
EPSS Percentile
0th
Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. We recommend you upgrade to amazon-braket-sdk version 1.117.0 or later.
| CWE | CWE-502 |
| Vendor | aws |
| Product | amazon braket python sdk |
| Published | May 22, 2026 |
| Last Updated | May 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for aws amazon braket python sdk
Be the first to know when new high vulnerabilities affecting aws amazon braket python sdk are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
AWS / Amazon Braket Python SDK
1.10.0 < 1.117.0