Skip to content
Threat Feed
Subscribe

Tag

Amazon

2 briefs RSS
high advisory

Amazon SageMaker Python SDK: S3 bucket pre-creation remote code execution (CVE-2026-112408)

The Amazon SageMaker Python SDK fails to verify S3 bucket ownership in the default_bucket() function, allowing attackers to pre-create predictable buckets for IAM credential theft or remote code execution.

SageMaker Python SDK cloud-security remote-code-execution credential-theft amazon
2t 1c
high advisory

Amazon Athena ODBC Driver Authentication Bypass Vulnerability (CVE-2026-35561)

CVE-2026-35561 describes an insufficient authentication security control vulnerability in the browser-based authentication components of the Amazon Athena ODBC driver before version 2.1.0.0, potentially allowing a threat actor to intercept or hijack authentication sessions.

amazon athena odbc authentication hijacking cve-2026-35561
2r 2t 1c