CVE-2026-104019

Vendor

Amazon Web Services

Product

AWS services

CVSS

9.0

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   AWS bulletin AWS 29d ago

   CVE-2026-104019 - OS command injection in the Studio Space startup script in Amazon SageMaker Distribution

   Bulletin ID: 2026-125-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/02/2026 13:00 PM PDT Description: Amazon SageMaker Unified Studio is an AWS service that unifies data, analytics, and AI…

   No fix yet CVE-2026-104019 Amazon Web Services
2. 23
   CVE NVD 29d ago

   OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x…

   OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and…

   CVSS 9.0 CVE-2026-104019 Amazon Web Services