Skip to content
Threat Feed

Tag

Key-Leakage

1 brief RSS
high advisory

Amazon SageMaker Python SDK HMAC Key Leakage via API Exposure

Amazon SageMaker Python SDK exposes an HMAC signing key in cleartext via API calls, enabling a remote authenticated actor to forge model artifacts and achieve code execution.

SageMaker Python SDK sagemaker hmac key-leakage cloud privilege-escalation
3r 1t