CVE-2026-112408

Vendor

Amazon Web Services

Product

AWS services

CVSS

8.1

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   AWS bulletin AWS 10d ago

   CVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

   Bulletin ID: 2026-142-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/21/2026 12:30 PM PDT Description: The Amazon SageMaker Python SDK is an open-source library for training and deploying machine…

   CVE-2026-112408 Amazon Web Services
2. 15
   CVE NVD 10d ago

   Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2…

   Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target…

   CVSS 8.1 CVE-2026-112408 Amazon Web Services