CVE-2026-112408CWE-940

CVE-2026-112408

High · published October 22, 2026

CVSS v3.1
8.1
EPSS
1%
Percentile
53.3
In the wild
Unconfirmed
What it is

Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably named S3 bucket that the SDK uses without ownership validation.

To remediate this issue, users should upgrade to Amazon SageMaker Python SDK 3.10.0 (V3) or 2.257.3 (V2).

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.4 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N
EPSS
0.00719 · 53.3th percentile
Weakness
CWE-940 · Improper Verification of Source of a Communication Channel
Published
2026-10-22T00:17Z
References (6)
https://aws.amazon.com/security/security-bulletins/2026-142-aws/ · ff89ba41-3aa1-4d27-914a-91399e9639e5https://github.com/aws/sagemaker-python-sdk/releases/tag/v2.257.3 · ff89ba41-3aa1-4d27-914a-91399e9639e5https://github.com/aws/sagemaker-python-sdk/releases/tag/v3.10.0 · ff89ba41-3aa1-4d27-914a-91399e9639e5https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-5rx8-8fr2-f855 · ff89ba41-3aa1-4d27-914a-91399e9639e5https://pypi.org/project/sagemaker/2.257.3/ · ff89ba41-3aa1-4d27-914a-91399e9639e5https://pypi.org/project/sagemaker/3.10.0/ · ff89ba41-3aa1-4d27-914a-91399e9639e5
EPSS history
Timeline
  • 23 OCT 03:55Z
    EPSS moved — → 1%
    epss
  • 21 OCT 19:36Z
    Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
    cvelistv5
  • 21 OCT 19:36Z
    Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
    cvelistv5