Read the docs
TI-2026-01460 Aliases CVE-2026-1777GHSA-rjrp-m2jw-pv9c

Cleartext transmission of sensitive materials in aws/sagemaker-python-sdk

Priority LOW 39CWE-319Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure, Spoofing
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-319 and CWE-295.

Summary

The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function. A third party with permissions to both call this API and permissions to modify objects in the Training Jobs S3 output location may have the ability to upload arbitrary artifacts which are executed the next time the Training Job is invoked.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0051 43rd percentileScored 2026-11-07
Fix Fixed SageMaker Python SDK (AWS): 3.2.0, 2.256.0sagemaker (PyPI): 3.2.0, 2.256.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AWSSageMaker Python SDK—3.2.0, 2.256.0Patch availableCNA
—sagemaker (PyPI)3.0 to before 3.2.03.2.0Patch availableGHSA-rjrp-m2jw-pv9c
—sagemaker (PyPI)before 2.256.02.256.0Patch availableGHSA-rjrp-m2jw-pv9c
  • SageMaker Python SDK VendorAWS Affected — Fixed in 3.2.0, 2.256.0 Patch available CNA
  • sagemaker (PyPI) Vendor— Affected 3.0 to before 3.2.0 Fixed in 3.2.0 Patch available GHSA-rjrp-m2jw-pv9c
  • sagemaker (PyPI) Vendor— Affected before 2.256.0 Fixed in 2.256.0 Patch available GHSA-rjrp-m2jw-pv9c

Remediation

  • Fix · CNA SageMaker Python SDK (AWS) Fixed in 3.2.0, 2.256.0
  • Fix · GHSA-rjrp-m2jw-pv9c sagemaker (PyPI) Fixed in 3.2.0 Advisory →
  • Fix · GHSA-rjrp-m2jw-pv9c sagemaker (PyPI) Fixed in 2.256.0 Advisory →

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    AWS SageMaker Python SDK — aws.amazon.com/security/security-bulletins/2026-004-AWS

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2026-01461 TLS disabled by default in select aws/sagemaker-python-sdk configurationsPriority LOW 35
    Show all 2 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-1777
  2. 2026-10-03 Alias added: GHSA-rjrp-m2jw-pv9c

References

Patch 2

Advisory 3

Other 4

  • TI-2026-23989 crypto: algif_aead - Revert to operating out-of-place KEVCVSS 3.1HIGH 7.8
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2024-18648 Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM… CVSS 3.1CRITICAL 9.8
  • TI-2024-05929 Openssh: regresshion - race condition in ssh allows rce/dos CVSS 3.1HIGH 8.1
  • TI-2025-03847 Input validation issue in AWS Amplify Studio UI component properties CVSS 4.0CRITICAL 9.0
  • TI-2026-11603 HTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAF CVSS 4.0HIGH 7.9
See all 383 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences