Incomplete List of Disallowed Inputs

Overview sagemaker-core is an An python package for sagemaker core functionalities Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the searchhub function. An attacker can execute arbitrary commands, access sensitive data, or compromise the execution...

PT-2026-25577

Summary This advisory addresses the use of the search hub function within the SageMaker Python SDK's JumpStart search functionality. An actor with the ability to control query parameters passed to the search hub function could potentially provide malformed input that causes the eval function to...