BaseFortify

Publication date: 2026-05-22

Last updated on: 2026-05-22

Assigner: AMZN

Description

Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. We recommend you upgrade to amazon-braket-sdk version 1.117.0 or later.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-22

Last Modified

2026-05-22

Generated

2026-07-06

EPSS Evaluated

2026-07-04

NVD

CVE-2026-9291

EUVD

EUVD-2026-31483

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2026-9291. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70