{"data":{"id":"85c1d8e4-9e08-4764-a693-452841e97abb","title":"Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 &amp: CVE-2026-8597)","summary":"Amazon SageMaker Python SDK versions >= v2.199.0 and <= v2.257.1, and >= v3.0.0 and <= v3.7.1, contain two flaws in the model artifact integrity checks of ModelBuilder/Serve, tracked as CVE-2026-8596 and CVE-2026-8597. The SDK stored an HMAC signing key as the SAGEMAKER_SERVE_SECRET_KEY container environment variable, and SageMaker describe APIs returned it in plaintext. A remote authenticated actor with those API permissions and S3 write access to the artifact path could forge signatures and run code in inference containers. The Triton inference handler also deserialized artifacts without integrity verification, letting such an actor replace them with a crafted pickle payload for code execution.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-031-aws/","publishedAt":"2026-05-14T20:07:25.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["model_poisoning","supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["Amazon SageMaker","Amazon SageMaker Python SDK"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-05-14T20:07:25.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"]}}