Cpe:2.3:a:amazon:sagemaker_python_sdk:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aamazonsagemaker_python_sdk/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 23:49:55 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAmazon SageMaker Python SDK: S3 bucket pre-creation remote code execution (CVE-2026-112408)https://feed.craftedsignal.io/briefs/2026-10-sagemaker-sdk-cve/Wed, 21 Oct 2026 23:49:55 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-sagemaker-sdk-cve/The Amazon SageMaker Python SDK fails to verify S3 bucket ownership in the default_bucket() function, allowing attackers to pre-create predictable buckets for IAM credential theft or remote code execution.CVE-2026-112408 identifies a vulnerability in the Amazon SageMaker Python SDK where the default_bucket() function does not perform adequate ownership validation of S3 buckets. An attacker who can predict the name of an S3 bucket that the SDK intends to use can pre-create that bucket. Because the SDK fails to verify its own ownership or the existence of a prior owner, it may proceed to use the attacker-controlled bucket. This can lead to the exposure of IAM credentials used by the SageMaker execution environment or allow for remote code execution within that environment.

Impact

Successful exploitation may result in the compromise of IAM credentials associated with the SageMaker execution role and remote code execution within the SageMaker environment.

Recommendation

Upgrade the Amazon SageMaker Python SDK to version 3.10.0 (for V3 users) or 2.257.3 (for V2 users) to implement proper bucket ownership validation.

]]>highadvisorycloud-securityremote-code-executioncredential-theftamazon