{"data":{"id":"49e8267f-5509-4434-863d-c141ff0a0fbb","title":"CVE-2026-8597: Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3…","summary":"Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 lets a remote authenticated actor with S3 write access to the model artifact path replace model artifacts with a crafted pickle payload. The payload is deserialized without verification, allowing code execution in inference containers.","solution":"Upgrade to Amazon SageMaker Python SDK v2.257.2 or v3.8.0, and rebuild any Triton models previously created with ModelBuilder using the updated SDK.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-8597","publishedAt":"2026-05-14T20:17:21.340Z","cveId":"CVE-2026-8597","cweIds":["CWE-354"],"cvssScore":"7.2","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["sagemaker@>= 2.199.0, <= 2.257.1 (fixed: 2.257.2)","sagemaker@>= 3.0.0, <= 3.7.1 (fixed: 3.8.0)"],"affectedPackageNames":["sagemaker"],"affectedPackageRefs":["pypi:sagemaker"],"affectedVendors":["Amazon"],"affectedVendorsRaw":["Amazon SageMaker Python SDK","SageMaker","Triton inference handler"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Amazon SageMaker Python SDK code execution via pickle model artifacts in S3","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"high","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00615,"epssCheckedAt":"2026-10-14T06:09:07.174Z","kevDateAdded":null,"advisoryAliases":["GHSA-rq6v-x3j8-7qgf"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:21.368Z","patchAvailable":true,"disclosureDate":"2026-05-14T20:17:21.340Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"]}}