CVE-2026-112408 AWS CVE debrief

Who should care

SageMaker users and administrators should assess exposure and prioritize upgrading to fixed SDK versions to prevent potential code execution in SageMaker execution environments and theft of IAM credentials. Affected operator, platform, vulnerability-management, and security-team impact should be reviewed to ensure proper mitigation and remediation.

Why it matters

CVE-2026-112408 allows potential code execution and IAM credential theft in AWS SageMaker Python SDK, requiring prompt upgrades and verification of S3 bucket ownership validation.

• Potential code execution in SageMaker execution environments
• Possible theft of IAM credentials
• Need for verification of S3 bucket ownership validation
• Priority for upgrading to fixed SDK versions

Technical summary

The default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 lacks verification of source communication channels, potentially allowing remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably named S3 bucket. This vulnerability requires prompt upgrades and verification of S3 bucket ownership validation to prevent potential code execution and IAM credential theft in AWS SageMaker Python SDK.

Defensive priority

High priority for SageMaker users to upgrade SDK versions

Recommended defensive actions

• Upgrade to Amazon SageMaker Python SDK 3.10.0 (V3) or 2.257.3 (V2)
• Review and verify ownership validation for S3 buckets used in SageMaker execution environments
• Monitor SageMaker environments for potential exploitation attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

Official CVE and NVD records, AWS SageMaker Python SDK release notes, and security bulletins provide details on the vulnerability and remediation steps. Evidence is limited to publicly available records and vendor advisories, which may not cover all potential deployment scenarios or affected systems. Defenders should verify S3 bucket ownership validation and review SageMaker execution environments for potential exposure.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.