CVE-2026-83551
Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid integrity signatures for specially crafted function payloads, achieving code execution in another user's pipeline execution context within the same AWS account.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.5
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H
- EPSS probability
- 0.38%
- CWE
- CWE-312
- Published
- 2026-09-01
- Last modified
- 2026-09-01
Affected products
- AWS sagemaker-python-sdk
Weakness type
Related vulnerabilities
- CVE-2026-80058 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-86280 — SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage
- CVE-2026-53603 — nebula-mesh: Operator session tokens stored in plaintext in the database
- CVE-2026-77975 — Ebyte NA111-M Cleartext Storage of Sensitive Information
- CVE-2026-82699 — sambitraj Student Management System Password aca.sql cleartext storage
- CVE-2026-82640 — browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage
- CVE-2026-77970 — Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions
- CVE-2026-75847 — Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail