CVE-2026-110248
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because the runclone_command() function does not redact credentials from subprocess error output. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK V3 3.10.0 or V2 2.257.3.
Risk Assessment
An authenticated user can read plaintext repository credentials from CloudWatch Logs, leading to unauthorized access to code repositories.
Recommendation
Upgrade Amazon SageMaker Python SDK to V3 3.10.0 or V2 2.257.3 to prevent credential leakage into logs.
Other vulnerabilities in Amazon SageMaker Python SDK
See all- CVE-2026-8597High
Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to achieve code execution in inference containers via replacement of model artifacts in S3 with a specially crafted pickle payload that is deserialized without verification.
- CVE-2026-8596High
The ModelBuilder/Serve components in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 have cleartext storage of sensitive information. This may allow a remote authenticated actor to extract the HMAC signing key from SageMaker API responses and forge valid integrity signatures for specially crafted model artifacts, leading to code execution in inference containers.
- CVE-2026-83551High
Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from DescribePipeline API responses and forge valid integrity signatures for crafted function payloads, achieving code execution in another user's pipeline execution context within the same AWS account.
Original NVD description (English source)
Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because the runclone_command() function does not redact credentials from subprocess error output. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK V3 3.10.0 or V2 2.257.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS