PT-2026-141170
CVE-2026-124035
·
Published
2026-11-09
·
Updated
2026-11-09
Description by
CVSS 4.0
7.5
HighMetricsAV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Amazon Braket Schemas versions prior to 1.32.2
Description
Unsafe reflection in the error mitigation schema validation allows a remote authenticated user with S3 write access to the quantum task output location to execute arbitrary code on any machine that retrieves the quantum task results. This is achieved by using a crafted task result document.
Recommendations
Upgrade to amazon-braket-schemas version 1.32.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾