autoqasm (0.1.1), mpqp (>=0.2.0, <=0.5.0) +3 more potentially affected by CVE-2026-9291 via amazon-braket-sdk (>=1.11.1, <=1.107.0)

amazon-braket-sdk PYPI version =1.11.1, =0.2.0, =0.14.0, =0.0.11.dev1, =0.1.0, =0.1.3 Source cves: CVE-2026-9291 Source advisory: OSV:PYSEC-2026-2342...

amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads()

SummaryAmazon Braket SDK is an open-source Python library for interacting with the Amazon Braket quantum computing service, including managing hybrid quantum jobs and retrieving job results. An issue exists where, under certain circumstances, a remote authenticated user with S3 write access to a...

PYSEC-2026-2342 amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads()

Summary Amazon Braket SDK is an open-source Python library for interacting with the Amazon Braket quantum computing service, including managing hybrid quantum jobs and retrieving job results. An issue exists where, under certain circumstances, a remote authenticated user with S3 write access to a...

PT-2026-59026

Summary Amazon Braket SDK is an open-source Python library for interacting with the Amazon Braket quantum computing service, including managing hybrid quantum jobs and retrieving job results. An issue exists where, under certain circumstances, a remote authenticated user with S3 write access to a...

qiskit-aws-braket-provider (>=0.0.1, <=0.0.2) potentially affected by CVE-2025-2000 via qiskit (0.20.0)

qiskit PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on qiskit and may be impacted: - qiskit-aws-braket-provider =0.0.1, =0.0.2 Source cves: CVE-2025-2000 Source advisory: OSV:PYSEC-2026-510...

autoqasm (0.1.1), mpqp (>=0.2.0, <=0.5.0) +3 more potentially affected by CVE-2026-9291 via amazon-braket-sdk (>=1.11.1, <=1.107.0)

amazon-braket-sdk PYPI version =1.11.1, =0.2.0, =0.14.0, =0.0.11.dev1, =0.1.0, =0.1.3 Source cves: CVE-2026-9291 Source advisory: OSV:GHSA-G697-2XRC-GC46...

autoqasm (0.1.1), mpqp (>=0.2.0, <=0.5.0) +3 more potentially affected by CVE-2026-9291 via amazon-braket-sdk (>=1.11.1, <=1.107.0)

amazon-braket-sdk PYPI version =1.11.1, =0.2.0, =0.14.0, =0.0.11.dev1, =0.1.0, =0.1.3 Source cves: CVE-2026-9291 Source advisory: GHSA-G697-2XRC-GC46...

EUVD-2026-31483

amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads...

GHSA-G697-2XRC-GC46 amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads()

Summary Amazon Braket SDK is an open-source Python library for interacting with the Amazon Braket quantum computing service, including managing hybrid quantum jobs and retrieving job results. An issue exists where, under certain circumstances, a remote authenticated user with S3 write access to a...

amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads()

Summary Amazon Braket SDK is an open-source Python library for interacting with the Amazon Braket quantum computing service, including managing hybrid quantum jobs and retrieving job results. An issue exists where, under certain circumstances, a remote authenticated user with S3 write access to a...

CVE-2026-9291

Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. We recommend you upgrade to...

autoqasm (0.1.1), mpqp (>=0.2.0, <=0.5.0) +3 more potentially affected by CVE-2026-9291 via amazon-braket-sdk (>=1.11.1, <=1.107.0)

amazon-braket-sdk PYPI version =1.11.1, =0.2.0, =0.14.0, =0.0.11.dev1, =0.1.0, =0.1.3 Source cves: CVE-2026-9291 Source advisory: SNYK:PYTHON-AMAZONBRAKETSDK-17279621...

Deserialization of Untrusted Data

Overview amazon-braket-sdk is an An open source library for interacting with quantum computing devices on Amazon Braket Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserializevalues function in job results processing component. An attacker can...

CVE-2026-9291

Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. We recommend you upgrade to...

autoqasm (0.1.1), mpqp (>=0.2.0, <=0.5.0) +3 more potentially affected by CVE-2026-9291 via amazon-braket-sdk (>=1.11.1, <=1.107.0)

amazon-braket-sdk PYPI version =1.11.1, =0.2.0, =0.14.0, =0.0.11.dev1, =0.1.0, =0.1.3 Source cves: CVE-2026-9291 Source advisory: MEND:CVE-2026-9291...

CVE-2026-9291 Insecure Deserialization in Amazon Braket SDK Job Results Processing

Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. We recommend you upgrade to...

CVE-2026-9291

Summary: CVE-2026-9291 describes an insecure deserialization flaw in the Amazon Braket SDK’s job results processing. Affected software: Amazon Braket SDK (job results processing component) before version 1.117.0. Impact (as stated): A remote authenticated user with S3 write access to the job outp...

CVE-2026-9291 Insecure Deserialization in Amazon Braket SDK Job Results Processing

Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. We recommend you upgrade to...

CVE-2026-9291 Insecure Deserialization in Amazon Braket SDK Job Results Processing

Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. We recommend you upgrade to...

CVE-2026-9291

Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. We recommend you upgrade to...