Skip to content
Threat Feed
Subscribe

Tag

Sagemaker

3 briefs RSS
high advisory

AWS SageMaker Execution Role Privilege Escalation via PassRole

An adversary with SageMaker resource-creation rights and broad iam:PassRole permissions can escalate privileges by passing highly privileged IAM roles to SageMaker notebook instances, training, processing, or pipeline jobs.

AWS SageMaker cloud aws privilege-escalation sagemaker
1t
high advisory

AWS SageMaker Notebook Lifecycle Configuration With Suspicious Script Content

This brief details how attackers can leverage compromised AWS credentials to inject malicious, base64-encoded scripts into Amazon SageMaker notebook lifecycle configurations, which then execute as root on notebook instances, enabling persistence, credential theft, or further compromise of the AWS environment.

Amazon SageMaker cloud aws sagemaker persistence execution backdoor credential-theft
2t
high advisory

Amazon SageMaker Python SDK HMAC Key Leakage via API Exposure

Amazon SageMaker Python SDK exposes an HMAC signing key in cleartext via API calls, enabling a remote authenticated actor to forge model artifacts and achieve code execution.

SageMaker Python SDK sagemaker hmac key-leakage cloud privilege-escalation
3r 1t