Log in Start free

Vulnerability · Published May 14, 2026 · Assigned by AMZN

CVE-2026-8596Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path

High 7.2

In plain English

A high-severity security flaw in Amazon SageMaker Python SDK from AWS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.6%top 50.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to extract the HMAC signing key from SageMaker API responses and forge valid integrity signatures for specially crafted model artifacts, achieving code execution in inference containers. This issue requires a remote authenticated actor with permissions to call SageMaker describe APIs and S3 write access to the model artifact path. To remediate this issue, we recommend upgrading to Amazon SageMaker Python SDK v2.257.2 or v3.8.0 and rebuild any models previously created with ModelBuilder using the updated SDK.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPIsagemaker2.257.2GHSA-7hh5-prp2-mfh5
PyPIsagemaker3.8.0GHSA-7hh5-prp2-mfh5
PyPIsagemaker2.257.2, 3.8.0PYSEC-2026-3059

Affected products (as reported)

VendorProductVersions
AWS Amazon SageMaker Python SDK 2.199.0 – through 2.257.13.0.0 – through 3.7.1

Weakness: CWE-312 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References