All 3 CVE vulnerabilities found in Amazon SageMaker Python SDK, with AI-generated Chinese analysis, references, and POCs.
Vendor: AWS
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-112408 | Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket() CWE-940 | 8.1 | High | 2026-10-21 |
| CVE-2026-8597 | Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDK CWE-354 | 7.2 | High | 2026-05-14 |
| CVE-2026-8596 | Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path CWE-312 | 7.2 | High | 2026-05-14 |
All 3 known CVE vulnerabilities affecting Amazon SageMaker Python SDK with full Chinese analysis, references, and POCs where available.