CVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
Amazon SageMaker ยท 2026-10-21
Actions
Technical Details
| Affected Versions | V2: < 2.257.3, V3: >= 3.0.0 and < 3.10.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-112408 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update Amazon SageMaker Python SDK to versions 2.257.3 (V2) and 3.10.0 (V3) to address CVE-2026-112408 and ensure that your S3 bucket is explicitly owned by your AWS account.
For Platform Teams
Integrate the updated Amazon SageMaker Python SDK to enhance security by verifying bucket ownership, thus preventing potential unauthorized access and code execution.
For Executives
Implement the latest Amazon SageMaker Python SDK updates to mitigate the risk of unauthorized code execution and IAM credential theft due to missing bucket ownership verification in the default_bucket() function.
Source
Related Amazon SageMaker Updates
- Amazon SageMaker AI announces training session APIs for serverless model customization (2026-10-22)
- Announcing new ways to customize models with SageMaker AI, without managing GPUs (2026-10-22)
- Amazon SageMaker AI now supports serverless model customization for Muse Glimmer, Qwen 3.8 and Ministral 3 models (2026-10-22)
- Beam model by Reflection is now available on Amazon SageMaker JumpStart and AWS Trainium (2026-10-21)
- Amazon SageMaker AI now supports custom sequence lengths for serverless model customization jobs (2026-10-21)