What’s Vulnerable › Products

AWS Amazon SageMaker Python SDK vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your AWS Amazon SageMaker Python SDK version is affected

Latest AWS Amazon SageMaker Python SDK vulnerabilities

• CVE-2026-112408 — Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket() (CVSS 8.1)
• CVE-2026-8597 — Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDK (CVSS 7.2)
• CVE-2026-8596 — Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path (CVSS 7.2)