CVE-2026-8596

Name of the Vulnerable Software and Affected Versions Amazon SageMaker Python SDK versions prior to 2.257.2 Amazon SageMaker Python SDK versions prior to 3.8.0

Description The ModelBuilder/Serve component stores sensitive information in cleartext. A remote authenticated actor with permissions to call SageMaker describe APIs and S3 write access to the model artifact path could extract the HMAC (Hash-based Message Authentication Code, a mechanism for verifying both the data integrity and the authenticity of a message) signing key from SageMaker API responses. This could allow the actor to forge valid integrity signatures for specially crafted model artifacts, leading to code execution in inference containers.

Recommendations Upgrade to version 2.257.2 and rebuild any models previously created with ModelBuilder. Upgrade to version 3.8.0 and rebuild any models previously created with ModelBuilder.