{"data":{"id":"93712b8e-2bf3-417c-9118-5c5d4f1432a3","title":"CVE-2026-110248 - Insertion of sensitive information into log files in Amazon SageMaker Python SDK","summary":"CVE-2026-110248 affects the git_utils.py component of the Amazon SageMaker Python SDK, an open source library for training and deploying machine learning models on Amazon SageMaker. When a Git clone operation fails, repository credentials in subprocess error output are written to CloudWatch Logs without redaction, and an authenticated remote user with access to those logs can obtain the plaintext credentials.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-134-aws/","publishedAt":"2026-10-14T18:38:55.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["pii_leakage"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["Amazon SageMaker","Amazon SageMaker Python SDK"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-14T18:38:55.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}