VulnSocial

CVE-2026-8596Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to extract the HMAC signing key from SageMaker API responses and forge valid integrity signatures for specially crafted model artifacts, achieving code execution in inference containers. This issue requires a remote authenticated actor with permissions to call SageMaker describe APIs and S3 write access to the model artifact path. To remediate this issue, we recommend upgrading to Amazon SageMaker Python SDK v2.257.2 or v3.8.0 and rebuild any models previously created with ModelBuilder using the updated SDK.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-312

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-05-15: 1Technical Details · 2026-05-15: 105-15
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Israel@f1tym1
    Disclosure

    CVE-2026-8596 | AWS Amazon SageMaker Python SDK up to 2.257.1/3.7.1 Serve cleartext storage (GHSA-7hh5-prp2-mfh5) https://ift.tt/7PMuk4D A vulnerability was found in AWS Amazon SageMaker Python SDK up to 2.257.1/3.7.1. It has been declared as problematic. Affected by this issu…

    Post summary

    The post announces CVE-2026-8596, noting a cleartext storage flaw in AWS SageMaker Python SDK up to version 2.257.1/3.7.1, but does not provide evidence of PoC, exploit, or active use.

    0000046
    971 followersView on X

Explore more

Back to dashboard