MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk
Priority MEDIUM 60CWE-328Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.0 · CNA. Fix status from CNA and GitHub.
Summary
A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This issue can cause integrity problems within the pipeline, potentially leading to erroneous processing outcomes.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00265 18th percentileScored 2026-11-07
Fix Fixed aws/sagemaker-python-sdk (aws): 4965sagemaker (PyPI): 2.237.3
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AWS | aws/sagemaker-python-sdk | before 4965 | 4965 | Patch available | CNA |
| — | sagemaker (PyPI) | before 2.237.3 | 2.237.3 | Patch available | GHSA-32g6-mg92-ghm2 |
- aws/sagemaker-python-sdk VendorAWS Affected before 4965 Fixed in 4965 Patch available CNA
- sagemaker (PyPI) Vendor— Affected before 2.237.3 Fixed in 2.237.3 Patch available GHSA-32g6-mg92-ghm2
Remediation
- Fix · CNA aws/sagemaker-python-sdk (aws) Fixed in 4965
- Fix · GHSA-32g6-mg92-ghm2 sagemaker (PyPI) Fixed in 2.237.3 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2025-0508
- 2026-10-03 Alias added: GHSA-32g6-mg92-ghm2
References
More AWS vulnerabilities
- TI-2026-23989 crypto: algif_aead - Revert to operating out-of-place KEVCVSS 3.1HIGH 7.8
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2024-18648 Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM… CVSS 3.1CRITICAL 9.8
- TI-2024-05929 Openssh: regresshion - race condition in ssh allows rce/dos CVSS 3.1HIGH 8.1
- TI-2025-03847 Input validation issue in AWS Amplify Studio UI component properties CVSS 4.0CRITICAL 9.0
- TI-2026-11603 HTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAF CVSS 4.0HIGH 7.9
Sources
- CVE-2025-0508 · CVE Program
- CVE-2025-0508 · NVD
- FIRST EPSS
- GHSA-32g6-mg92-ghm2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences