Security Findings in SageMaker Python SDK

Summary

AWS disclosed two vulnerabilities in the SageMaker Python SDK, tracked as CVE-2026-1777 and CVE-2026-1778. CVE-2026-1777 stores the per-job HMAC secret key in environment variables, where the DescribeTrainingJob API discloses it, letting anyone with DescribeTrainingJob permissions forge cloud-pickled payloads and overwrite S3 objects. CVE-2026-1778 globally disables SSL certificate verification in the Triton Python backend, affecting all HTTPS connections when the Triton Python model is imported.

Mitigation

Fixed in SageMaker Python SDK v3.2.0 and v2.256.0 for the HMAC issue (CVE-2026-1777), and in v3.1.1 and v2.256.0 for the insecure TLS issue (CVE-2026-1778).

Related items

• HighCVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypassSame vendor · AWS Security Bulletins
• MediumCVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP ServerSame vendor · AWS Security Bulletins
• MediumCVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC WorkflowsSame vendor · AWS Security Bulletins
• HighCVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents ToolsSame vendor · AWS Security Bulletins
• HighGHSA-4v6f-7vjh-6x4m: Strands Agents SDK: Exposure of data element to wrong session in the A2A ServerSame vendor · GitHub Advisory Database