CVE-2026-83551
Received Received - Intake

Cleartext Credential Storage in Amazon SageMaker Python SDK

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: AMZN

Description
Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid integrity signatures for specially crafted function payloads, achieving code execution in another user's pipeline execution context within the same AWS account.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-02
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-83551
EUVD
EUVD-2026-69418

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
amazon sagemaker_python_sdk to 3.11.0|end_excluding=2.256.0 (exc)
amazon sagemaker_python_sdk to 3.11.0 (exc)
amazon sagemaker_python_sdk to 2.256.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-312 The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves cleartext storage of an HMAC signing key in the Amazon SageMaker Python SDK versions below v3.11.0 and v2.256.0. The key is used to protect serialized function payloads in the @step and @remote decorator pipeline components. It is exposed via the SageMaker DescribePipeline API, allowing authenticated users to extract it and forge valid integrity signatures for malicious function payloads.

Detection Guidance

To detect this vulnerability, check if your SageMaker Python SDK version is below v3.11.0 or v2.256.0. Run: pip show sagemaker or pip list | grep sagemaker. If outdated, upgrade immediately. Also review IAM policies for sagemaker:DescribePipeline permissions and S3 access controls.

Impact Analysis

An attacker with sagemaker:DescribePipeline permissions could extract the HMAC key, forge malicious payloads, and overwrite other users' serialized function objects in S3. This could lead to arbitrary code execution in another user's pipeline execution context within the same AWS account, potentially compromising data and resources.

Compliance Impact

This vulnerability could potentially violate compliance requirements under GDPR and HIPAA due to the cleartext storage of sensitive HMAC signing keys. Unauthorized access to these keys may lead to unauthorized code execution, compromising data integrity and confidentiality. Organizations handling personal or health data must ensure pipeline integrity to meet regulatory standards.

Mitigation Strategies

Upgrade Amazon SageMaker Python SDK to v3.11.0 or later and v2.256.0 or later to address the cleartext storage issue in the @step and @remote decorator pipeline component.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-83551. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart