5 matches found
CVE-2026-83551: Cleartext Storage of Sensitive Information
Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...
8.5CVSS6.1AI score0.00628EPSS
SaveExploits0References2
20