GHSA-RQ6V-X3J8-7QGF Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler

Summary Amazon SageMaker Python SDK is an open-source library for training and deploying machine learning models on Amazon SageMaker. An issue exists where, under certain circumstances, the Triton inference handler deserializes model artifacts without performing integrity verification, allowing...

amzn-nova-customization-sdk (>=1.0.29, <=1.0.83), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20231219) +18 more potentially affected by CVE-2026-8597 via sagemaker (>=2.199.0, <=2.254.1)

sagemaker PYPI version =2.199.0, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.0, =0.1.1, =0.9.0, =2.1.0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.4.6, =0.4.0, =0.0.9, =0.0.10 and more Source cves: CVE-2026-8597 Source advisory: OSV:GHSA-RQ6V-X3J8-7QGF...

amzn-nova-customization-sdk (1.3.14), amzn-nova-forge (>=1.3.14, <=1.3.18) potentially affected by CVE-2026-8597 via sagemaker (3.5.0)

sagemaker PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge =1.3.14, =1.3.18 Source cves: CVE-2026-8597 Source advisory: OSV:GHSA-RQ6V-X3J8-7QGF...

EUVD-2026-30423

Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler...

Improper Validation of Integrity Check Value

Overview sagemaker-serve is a SageMaker Serve package for model serving and deployment Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the Triton inference handler. An attacker can execute arbitrary code with the SageMaker execution role's IAM...

amzn-nova-customization-sdk (1.3.14), amzn-nova-forge (1.3.14) potentially affected by CVE-2026-8597 via sagemaker-serve (1.5.0)

sagemaker-serve PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker-serve and may be impacted: - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge 1.3.14 Source cves: CVE-2026-8597 Source advisory:...

amzn-nova-customization-sdk (>=1.0.29, <=1.0.83), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20231219) +18 more potentially affected by CVE-2026-8597 via sagemaker (>=2.199.0, <=2.254.1)

sagemaker PYPI version =2.199.0, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.0, =0.1.1, =0.9.0, =2.1.0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.4.6, =0.4.0, =0.0.9, =0.0.10 and more Source cves: CVE-2026-8597 Source advisory: GHSA-RQ6V-X3J8-7QGF...

Improper Validation of Integrity Check Value

Overview sagemaker is an Open source library for training and deploying models on Amazon SageMaker. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the Triton inference handler. An attacker can execute arbitrary code with the SageMaker execution...

amzn-nova-customization-sdk (>=1.0.29, <=1.0.83), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20231219) +18 more potentially affected by CVE-2026-8597 via sagemaker (>=2.199.0, <=2.254.1)

sagemaker PYPI version =2.199.0, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.0, =0.1.1, =0.9.0, =2.1.0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.4.6, =0.4.0, =0.0.9, =0.0.10 and more Source cves: CVE-2026-8597 Source advisory: SNYK:PYTHON-SAGEMAKER-16795363...

Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler

Summary Amazon SageMaker Python SDK is an open-source library for training and deploying machine learning models on Amazon SageMaker. An issue exists where, under certain circumstances, the Triton inference handler deserializes model artifacts without performing integrity verification, allowing...

EUVD-2026-30420

Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path...

amzn-nova-customization-sdk (>=1.0.29, <=1.0.83), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20231219) +18 more potentially affected by CVE-2026-8596 via sagemaker (>=2.199.0, <=2.254.1)

sagemaker PYPI version =2.199.0, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.0, =0.1.1, =0.9.0, =2.1.0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.4.6, =0.4.0, =0.0.9, =0.0.10 and more Source cves: CVE-2026-8596 Source advisory: GHSA-7HH5-PRP2-MFH5...

Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path

Summary Amazon SageMaker Python SDK is an open-source library for training and deploying machine learning models on Amazon SageMaker. An issue exists where, under certain circumstances, the ModelBuilder/Serve component stores an HMAC signing key in cleartext as a container environment variable,...

amzn-nova-customization-sdk (1.3.14), amzn-nova-forge (>=1.3.14, <=1.3.18) potentially affected by CVE-2026-8596 via sagemaker (3.5.0)

sagemaker PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge =1.3.14, =1.3.18 Source cves: CVE-2026-8596 Source advisory: GHSA-7HH5-PRP2-MFH5...

amzn-nova-customization-sdk (1.3.14), amzn-nova-forge (1.3.14) potentially affected by CVE-2026-8596 via sagemaker-serve (1.5.0)

sagemaker-serve PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker-serve and may be impacted: - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge 1.3.14 Source cves: CVE-2026-8596 Source advisory:...

GHSA-7HH5-PRP2-MFH5 Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path

Summary Amazon SageMaker Python SDK is an open-source library for training and deploying machine learning models on Amazon SageMaker. An issue exists where, under certain circumstances, the ModelBuilder/Serve component stores an HMAC signing key in cleartext as a container environment variable,...

amzn-nova-customization-sdk (>=1.0.29, <=1.0.83), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20231219) +18 more potentially affected by CVE-2026-8596 via sagemaker (>=2.199.0, <=2.254.1)

sagemaker PYPI version =2.199.0, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.0, =0.1.1, =0.9.0, =2.1.0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.4.6, =0.4.0, =0.0.9, =0.0.10 and more Source cves: CVE-2026-8596 Source advisory: SNYK:PYTHON-SAGEMAKER-16795361...

amzn-nova-customization-sdk (1.3.14), amzn-nova-forge (>=1.3.14, <=1.3.18) potentially affected by CVE-2026-8596 via sagemaker (3.5.0)

sagemaker PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge =1.3.14, =1.3.18 Source cves: CVE-2026-8596 Source advisory: OSV:GHSA-7HH5-PRP2-MFH5...

amzn-nova-customization-sdk (>=1.0.29, <=1.0.83), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20231219) +18 more potentially affected by CVE-2026-8596 via sagemaker (>=2.199.0, <=2.254.1)

sagemaker PYPI version =2.199.0, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.0, =0.1.1, =0.9.0, =2.1.0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.4.6, =0.4.0, =0.0.9, =0.0.10 and more Source cves: CVE-2026-8596 Source advisory: OSV:GHSA-7HH5-PRP2-MFH5...

Cleartext Storage of Sensitive Information

Overview sagemaker-serve is a SageMaker Serve package for model serving and deployment Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in the ModelBuilder/Serve component. An attacker can extract sensitive HMAC signing keys by accessing the SageMaker...