SageMaker

Everything Threat Times has reported about SageMaker: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

AWS Fixes Cleartext HMAC Key Leak in SageMaker Python SDK

Threat TimesOct 22, 2026

Amazon patches a flaw in SageMaker SDK that exposed signing keys, allowing code execution in pipeline contexts within the same account.

Vulnerabilities

AWS Releases SageMaker SDK Patches to Fix Bucket Bypass Vulnerability CVE-2026-112408

Threat TimesOct 21, 2026

Attackers could hijack SageMaker environments by pre-creating S3 buckets, a flaw now fixed in updated SDK versions.