CVE record · 2 sources
CVE-2026-124034
CVSS 6.4Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with…
- Vendor
- AWS
- Product
- amazon-braket-sdk
- CVSS v3.1
- 6.4 AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H
- Weakness
- CWE-23
- Exposure class
- Developer platform
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK
Bulletin ID: 2026-175-AWS Publication Date: 11/09/2026 14:15 PM PST Description: Amazon Braket SDK is an open source Python library that customers use to run quantum tasks and hybrid jobs on Amazon Braket. We identified…
-
Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with…
Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with S3 write access to a hybrid job's input data location to overwrite arbitrary…