{"data":{"id":"546df6f3-744c-4f4f-a711-9824888ffa29","title":"GHSA-7hh5-prp2-mfh5: Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path","summary":"Under certain circumstances, the ModelBuilder/Serve component of Amazon SageMaker Python SDK stores an HMAC signing key in cleartext as the SAGEMAKER_SERVE_SECRET_KEY container environment variable. The DescribeModel, DescribeEndpointConfig, and DescribeModelPackage APIs return this variable in plaintext. A remote authenticated actor with describe permissions and S3 write access to the model artifact path could extract the key, forge integrity signatures for crafted model artifacts, and achieve code execution in inference containers with the SageMaker execution role's IAM permissions. Affected versions are >= v2.199.0 through <= v2.257.1, and >= v3.0.0 through <= v3.7.1.","solution":"Upgrade to Amazon SageMaker Python SDK v2.257.2 or v3.8.0 and rebuild any models previously created with ModelBuilder, since models built with affected versions may still hold the HMAC key in their container environment variables. Patch any forked or derivative code. If upgrading is not immediately possible, manually remove the SAGEMAKER_SERVE_SECRET_KEY environment variable by recreating the model without it in the container environment configuration.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-7hh5-prp2-mfh5","publishedAt":"2026-05-21T17:42:40.000Z","cveId":"CVE-2026-8596","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["sagemaker@>= 3.0.0, <= 3.7.1 (fixed: 3.8.0)","sagemaker@>= 2.199.0, <= 2.257.1 (fixed: 2.257.2)"],"affectedPackageNames":["sagemaker"],"affectedPackageRefs":["pypi:sagemaker"],"affectedVendors":["Amazon"],"affectedVendorsRaw":["Amazon SageMaker","Amazon SageMaker Python SDK","ModelBuilder","TorchServe","Multi-Model Server","TensorFlow Serving","Triton"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00802,"epssCheckedAt":"2026-10-14T06:09:07.401Z","kevDateAdded":null,"advisoryAliases":["GHSA-7hh5-prp2-mfh5"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-21T17:42:40.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}