PatchSiren cyber security CVE debrief

CVE-2026-83551 AWS CVE debrief

The @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 stores sensitive information in cleartext, potentially allowing an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid integrity signatures for specially crafted function payloads. This could lead to code execution in another user's pipeline execution context within the same AWS account. Users of Amazon SageMaker Python SDK, especially those with authenticated remote access to pipeline execution contexts, should verify their SDK versions and update to v3.11.0 or v2.256.0 if necessary to prevent potential code execution. The CVE record was published on 2026-09-01T19:17:29.483Z and has not been modified since then.

Vendor: AWS
Product: sagemaker-python-sdk
CVSS: HIGH 8.5
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-09-01
Original CVE updated: 2026-09-03
Advisory published: 2026-09-01
Advisory updated: 2026-09-03

Who should care

Users of Amazon SageMaker Python SDK, especially those with authenticated remote access to pipeline execution contexts, should verify their SDK versions and update to v3.11.0 or v2.256.0 if necessary to prevent potential code execution.

Technical summary

The @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 stores sensitive information in cleartext. An authenticated remote user can extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid integrity signatures for specially crafted function payloads, achieving code execution in another user's pipeline execution context within the same AWS account.

Defensive priority

Authenticated remote users may extract HMAC signing keys and forge integrity signatures to achieve code execution in another user's pipeline execution context within the same AWS account. Users should verify their SageMaker Python SDK versions and update to v3.11.0 or v2.256.0 if necessary.

Recommended defensive actions

Verify SageMaker Python SDK versions and update to v3.11.0 or v2.256.0 if necessary
Restrict access to SageMaker DescribePipeline API responses
Monitor pipeline execution for suspicious activity
Implement compensating controls to detect and prevent code execution
Review pipeline configurations for potential vulnerabilities
Track exceptions and retest remediated assets
Close the item only after evidence is documented

Evidence notes

The CVE-2026-83551 record indicates cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0. An authenticated remote user might extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid integrity signatures for specially crafted function payloads, achieving code execution in another user's pipeline execution context within the same AWS account.

Sources and references

Verified primary and authoritative sources

CVE-2026-83551 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-83551

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-83551 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-83551

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source reference
Unverified legacy reference

URL: https://aws.amazon.com/security/security-bulletins/2026-093-aws/

ff89ba41-3aa1-4d27-914a-91399e9639e5
Source reference
Unverified legacy reference

URL: https://github.com/aws/sagemaker-python-sdk/releases/tag/v2.256.0

ff89ba41-3aa1-4d27-914a-91399e9639e5
Source reference
Unverified legacy reference

URL: https://github.com/aws/sagemaker-python-sdk/releases/tag/v3.11.0

ff89ba41-3aa1-4d27-914a-91399e9639e5
Source reference
Unverified legacy reference

URL: https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-7xmc-crrw-fv5r

ff89ba41-3aa1-4d27-914a-91399e9639e5

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.