CVE-2026-1777
CVE-2026-1777 · Cleartext transmission of sensitive materials in aws/sagemaker-python-sdk
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.
The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function. A third party with permissions to both call this API and permissions to modify objects in the Training Jobs S3 output location may have the ability to upload arbitrary artifacts which are executed the next time the Training Job is invoked.
CVSS 8.5 · Hoch · EPSS 0,5% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: python
Betroffene Produkte und Versionen
sagemaker python sdk
- Softwareversionen
- 3.2.0: Nicht betroffen
- 2.256.0: Nicht betroffen
Keine Korrektur veröffentlicht
sagemaker PyPI
- Softwareversionen
- 3.0
- 3.0.1
- 3.1.0
- 3.1.1
- Betroffene Versionsbereiche
- ECOSYSTEM: ≥ 3.0, < 3.2.0
Auf 3.2.0 aktualisieren
sagemaker PyPI
- Softwareversionen
- 1.0.0
- 1.0.1
- 1.0.2
- 1.1.0
- 1.1.1
- 1.1.2
- 1.1.3
- 1.10.0
- 1.10.1
- 1.11.0
- 1.11.1
- 1.11.2
- 1.11.3
- 1.12.0
- 1.13.0
- 1.14.0
- 1.14.1
- 1.14.2
- 1.15.0
- 1.15.1
- 1.15.2
- 1.16.1
- 1.16.1.post1
- 1.16.2
- 1.16.3
- 1.17.0
- 1.17.1
- 1.17.2
- 1.18.0
- 1.18.1
- 1.18.10
- 1.18.11
- 1.18.12
- 1.18.13
- 1.18.14
- 1.18.14.post0
- 1.18.14.post1
- 1.18.15
- 1.18.16
- 1.18.17
- 1.18.18
- 1.18.19
- 1.18.2
- 1.18.3
- 1.18.3.post1
- 1.18.4
- 1.18.5
- 1.18.6.post0
- 1.18.7
- 1.18.8
- 1.18.9
- 1.18.9.post0
- 1.18.9.post1
- 1.19.0
- 1.19.1
- 1.2.0
- 1.2.1
- 1.2.2
- 1.2.3
- 1.2.4
- 1.2.5
- 1.20.0
- 1.20.1
- 1.20.2
- 1.20.3
- 1.21.0
- 1.21.1
- 1.21.2
- 1.22.0
- 1.23.0
- 1.24.0
- 1.25.0
- 1.25.1
- 1.26.0
- 1.27.0
- 1.28.0
- 1.28.1
- 1.28.2
- 1.28.3
- 1.29.0
- 1.3.0
- 1.30.0
- 1.31.0
- 1.31.1
- 1.32.0
- 1.32.1
- 1.32.2
- 1.33.0
- 1.34.0
- 1.34.1
- 1.34.2
- 1.34.3
- 1.35.0
- 1.35.1
- 1.36.0
- 1.36.1
- 1.36.2
- 1.36.3
- 1.36.4
- 1.37.0
- 1.37.1
- 1.37.2
- 1.38.0
- 1.38.1
- 1.38.2
- 1.38.3
- 1.38.4
- 1.38.5
- 1.38.6
- 1.39.0
- 1.39.1
- 1.39.2
- 1.39.3
- 1.39.4
- 1.4.0
- 1.4.1
- 1.4.2
- 1.40.0
- 1.40.1
- 1.40.2
- 1.41.0
- 1.42.0
- 1.42.1
- 1.42.2
- 1.42.3
- 1.42.4
- 1.42.5
- 1.42.6
- 1.42.6.post0
- 1.42.7
- 1.42.8
- 1.42.9
- 1.43.0
- 1.43.1
- 1.43.2
- 1.43.3
- 1.43.4
- 1.43.4.post0
- 1.43.4.post1
- 1.43.5
- 1.44.0
- 1.44.1
- 1.44.2
- 1.44.3
- 1.44.4
- 1.45.0
- 1.45.1
- 1.45.2
- 1.46.0
- 1.47.1
- 1.48.0
- 1.48.1
- 1.49.0
- 1.5.0
- 1.5.1
- 1.5.2
- 1.5.3
- 1.5.4
- 1.50.0
- 1.50.1
- 1.50.10
- 1.50.10.post0
- 1.50.11
- 1.50.12
- 1.50.13
- 1.50.14
- 1.50.14.post0
- 1.50.15
- 1.50.16
- 1.50.17
- 1.50.17.post0
- 1.50.18
- 1.50.18.post0
- 1.50.2
- 1.50.3
- 1.50.4
- 1.50.5
- 1.50.6
- 1.50.6.post0
- 1.50.7
- 1.50.8
- 1.50.9
- 1.50.9.post0
- 1.51.0
- 1.51.1
- 1.51.2
- 1.51.3
- 1.51.4
- 1.52.0
- 1.52.0.post0
- 1.52.1
- 1.53.0
- 1.54.0
- 1.55.0
- 1.55.0.post0
- 1.55.1
- 1.55.2
- 1.55.3
- 1.55.4
- 1.56.0
- 1.56.1
- 1.56.1.post0
- 1.56.1.post1
- 1.56.2
- 1.56.3
- 1.57.0
- 1.58.0
- 1.58.1
- 1.58.2
- 1.58.2.post0
- 1.58.3
- 1.58.4
- 1.59.0
- 1.6.0
- 1.6.1
- 1.60.0
- 1.60.0.post0
- 1.60.1
- 1.60.2
- 1.61.0
- 1.62.0
- 1.63.0
- 1.64.0
- 1.64.1
- 1.65.0
- 1.65.1
- 1.65.1.post0
- 1.65.1.post1
- 1.66.0
- 1.67.0
- 1.67.1
- 1.67.1.post0
- 1.68.0
- 1.69.0
- 1.7.0
- 1.7.1
- 1.7.2
- 1.70.0
- 1.70.1
- 1.70.2
- 1.71.0
- 1.71.1
- 1.72.0
- 1.72.1
- 1.8.0
- 1.9.0
- 1.9.1
- 1.9.2
- 1.9.3
- 1.9.3.1
- 2.0.0
- 2.0.1
- 2.1.0
- 2.10.0
- 2.100.0
- 2.101.1
- 2.102.0
- 2.103.0
- 2.104.0
- 2.105.0
- 2.106.0
- 2.107.0
- 2.108.0
- 2.109.0
- 2.11.0
- 2.110.0
- 2.111.0
- 2.112.0
- 2.112.1
- 2.112.2
- 2.113.0
- 2.114.0
- 2.115.0
- 2.116.0
- 2.117.0
- 2.118.0
- 2.119.0
- 2.12.0
- 2.120.0
- 2.121.0
- 2.121.1
- 2.121.2
- 2.122.0
- 2.122.1.dev0
- 2.123.0
- 2.124.0
- 2.125.0
- 2.126.0
- 2.127.0
- 2.128.0
- 2.129.0
- 2.13.0
- 2.130.0
- 2.131.0
- 2.131.1
- 2.132.0
- 2.133.0
- 2.134.0
- 2.134.1
- 2.135.0
- 2.135.1
- 2.135.1.post0
- 2.136.0
- 2.137.0
- 2.138.0
- 2.139.0
- 2.14.0
- 2.140.0
- 2.140.1
- 2.141.0
- 2.142.0
- 2.143.0
- 2.144.0
- 2.145.0
- 2.146.0
- 2.146.1
- 2.147.0
- 2.148.0
- 2.149.0
- 2.15.0
- 2.15.1
- 2.15.2
- 2.15.3
- 2.15.4
- 2.150.0
- 2.151.0
- 2.152.0
- 2.153.0
- 2.154.0
- 2.155.0
- 2.156.0
- 2.157.0
- 2.158.0
- 2.159.0
- 2.16.0
- 2.16.0.post0
- 2.16.1
- 2.16.2
- 2.16.3
- 2.16.3.post0
- 2.16.4
- 2.160.0
- 2.161.0
- 2.162.0
- 2.163.0
- 2.164.0
- 2.165.0
- 2.166.0
- 2.167.0
- 2.168.0
- 2.169.0
- 2.17.0
- 2.170.0
- 2.171.0
- 2.172.0
- 2.173.0
- 2.174.0
- 2.175.0
- 2.176.0
- 2.177.0
- 2.177.1
- 2.178.0
- 2.179.0
- 2.18.0
- 2.180.0
- 2.181.0
- 2.182.0
- 2.183.0
- 2.184.0
- 2.184.0.post0
- 2.185.0
- 2.186.0
- 2.187.0
- 2.188.0
- 2.189.0
- 2.19.0
- 2.190.0
- 2.191.0
- 2.192.0
- 2.192.1
- 2.193.0
- 2.194.0
- 2.195.0
- 2.195.1
- 2.196.0
- 2.197.0
- 2.197.1
- 2.198.0
- 2.198.1
- 2.199.0
- 2.2.0
- 2.20.0
- 2.200.0
- 2.200.1
- 2.201.0
- 2.202.0
- 2.202.1
- 2.203.0
- 2.203.1
- 2.204.0
- 2.205.0
- 2.206.0
- 2.207.0
- 2.207.1
- 2.208.0
- 2.209.0
- 2.21.0
- 2.210.0
- 2.211.0
- 2.212.0
- 2.213.0
- 2.214.0
- 2.214.1
- 2.214.2
- 2.214.3
- 2.215.0
- 2.216.0
- 2.216.1
- 2.217.0
- 2.218.0
- 2.218.1
- 2.219.0
- 2.22.0
- 2.220.0
- 2.221.0
- 2.221.1
- 2.222.0
- 2.222.1
- 2.223.0
- 2.224.0
- 2.224.1
- 2.224.2
- 2.224.3
- 2.224.4
- 2.225.0
- 2.226.0
- 2.226.1
- 2.227.0
- 2.228.0
- 2.229.0
- 2.23.0
- 2.23.1
- 2.23.2
- 2.23.3
- 2.23.4
- 2.23.4.post0
- 2.23.5
- 2.23.6
- 2.230.0
- 2.231.0
- 2.232.0
- 2.232.1
- 2.232.2
- 2.232.3
- 2.233.0
- 2.234.0
- 2.235.0
- 2.235.1
- 2.235.2
- 2.236.0
- 2.237.0
- 2.237.1
- 2.237.3
- 2.238.0
- 2.239.0
- 2.239.1
- 2.239.2
Auf 2.256.0 aktualisieren
sagemaker PyPI
- Softwareversionen
- 1.0.0
- 1.0.1
- 1.0.2
- 1.1.0
- 1.1.1
- 1.1.2
- 1.1.3
- 1.10.0
- 1.10.1
- 1.11.0
- 1.11.1
- 1.11.2
- 1.11.3
- 1.12.0
- 1.13.0
- 1.14.0
- 1.14.1
- 1.14.2
- 1.15.0
- 1.15.1
- 1.15.2
- 1.16.1
- 1.16.1.post1
- 1.16.2
- 1.16.3
- 1.17.0
- 1.17.1
- 1.17.2
- 1.18.0
- 1.18.1
- 1.18.10
- 1.18.11
- 1.18.12
- 1.18.13
- 1.18.14
- 1.18.14.post0
- 1.18.14.post1
- 1.18.15
- 1.18.16
- 1.18.17
- 1.18.18
- 1.18.19
- 1.18.2
- 1.18.3
- 1.18.3.post1
- 1.18.4
- 1.18.5
- 1.18.6.post0
- 1.18.7
- 1.18.8
- 1.18.9
- 1.18.9.post0
- 1.18.9.post1
- 1.19.0
- 1.19.1
- 1.2.0
- 1.2.1
- 1.2.2
- 1.2.3
- 1.2.4
- 1.2.5
- 1.20.0
- 1.20.1
- 1.20.2
- 1.20.3
- 1.21.0
- 1.21.1
- 1.21.2
- 1.22.0
- 1.23.0
- 1.24.0
- 1.25.0
- 1.25.1
- 1.26.0
- 1.27.0
- 1.28.0
- 1.28.1
- 1.28.2
- 1.28.3
- 1.29.0
- 1.3.0
- 1.30.0
- 1.31.0
- 1.31.1
- 1.32.0
- 1.32.1
- 1.32.2
- 1.33.0
- 1.34.0
- 1.34.1
- 1.34.2
- 1.34.3
- 1.35.0
- 1.35.1
- 1.36.0
- 1.36.1
- 1.36.2
- 1.36.3
- 1.36.4
- 1.37.0
- 1.37.1
- 1.37.2
- 1.38.0
- 1.38.1
- 1.38.2
- 1.38.3
- 1.38.4
- 1.38.5
- 1.38.6
- 1.39.0
- 1.39.1
- 1.39.2
- 1.39.3
- 1.39.4
- 1.4.0
- 1.4.1
- 1.4.2
- 1.40.0
- 1.40.1
- 1.40.2
- 1.41.0
- 1.42.0
- 1.42.1
- 1.42.2
- 1.42.3
- 1.42.4
- 1.42.5
- 1.42.6
- 1.42.6.post0
- 1.42.7
- 1.42.8
- 1.42.9
- 1.43.0
- 1.43.1
- 1.43.2
- 1.43.3
- 1.43.4
- 1.43.4.post0
- 1.43.4.post1
- 1.43.5
- 1.44.0
- 1.44.1
- 1.44.2
- 1.44.3
- 1.44.4
- 1.45.0
- 1.45.1
- 1.45.2
- 1.46.0
- 1.47.1
- 1.48.0
- 1.48.1
- 1.49.0
- 1.5.0
- 1.5.1
- 1.5.2
- 1.5.3
- 1.5.4
- 1.50.0
- 1.50.1
- 1.50.10
- 1.50.10.post0
- 1.50.11
- 1.50.12
- 1.50.13
- 1.50.14
- 1.50.14.post0
- 1.50.15
- 1.50.16
- 1.50.17
- 1.50.17.post0
- 1.50.18
- 1.50.18.post0
- 1.50.2
- 1.50.3
- 1.50.4
- 1.50.5
- 1.50.6
- 1.50.6.post0
- 1.50.7
- 1.50.8
- 1.50.9
- 1.50.9.post0
- 1.51.0
- 1.51.1
- 1.51.2
- 1.51.3
- 1.51.4
- 1.52.0
- 1.52.0.post0
- 1.52.1
- 1.53.0
- 1.54.0
- 1.55.0
- 1.55.0.post0
- 1.55.1
- 1.55.2
- 1.55.3
- 1.55.4
- 1.56.0
- 1.56.1
- 1.56.1.post0
- 1.56.1.post1
- 1.56.2
- 1.56.3
- 1.57.0
- 1.58.0
- 1.58.1
- 1.58.2
- 1.58.2.post0
- 1.58.3
- 1.58.4
- 1.59.0
- 1.6.0
- 1.6.1
- 1.60.0
- 1.60.0.post0
- 1.60.1
- 1.60.2
- 1.61.0
- 1.62.0
- 1.63.0
- 1.64.0
- 1.64.1
- 1.65.0
- 1.65.1
- 1.65.1.post0
- 1.65.1.post1
- 1.66.0
- 1.67.0
- 1.67.1
- 1.67.1.post0
- 1.68.0
- 1.69.0
- 1.7.0
- 1.7.1
- 1.7.2
- 1.70.0
- 1.70.1
- 1.70.2
- 1.71.0
- 1.71.1
- 1.72.0
- 1.72.1
- 1.8.0
- 1.9.0
- 1.9.1
- 1.9.2
- 1.9.3
- 1.9.3.1
- 2.0.0
- 2.0.1
- 2.1.0
- 2.10.0
- 2.100.0
- 2.101.1
- 2.102.0
- 2.103.0
- 2.104.0
- 2.105.0
- 2.106.0
- 2.107.0
- 2.108.0
- 2.109.0
- 2.11.0
- 2.110.0
- 2.111.0
- 2.112.0
- 2.112.1
- 2.112.2
- 2.113.0
- 2.114.0
- 2.115.0
- 2.116.0
- 2.117.0
- 2.118.0
- 2.119.0
- 2.12.0
- 2.120.0
- 2.121.0
- 2.121.1
- 2.121.2
- 2.122.0
- 2.122.1.dev0
- 2.123.0
- 2.124.0
- 2.125.0
- 2.126.0
- 2.127.0
- 2.128.0
- 2.129.0
- 2.13.0
- 2.130.0
- 2.131.0
- 2.131.1
- 2.132.0
- 2.133.0
- 2.134.0
- 2.134.1
- 2.135.0
- 2.135.1
- 2.135.1.post0
- 2.136.0
- 2.137.0
- 2.138.0
- 2.139.0
- 2.14.0
- 2.140.0
- 2.140.1
- 2.141.0
- 2.142.0
- 2.143.0
- 2.144.0
- 2.145.0
- 2.146.0
- 2.146.1
- 2.147.0
- 2.148.0
- 2.149.0
- 2.15.0
- 2.15.1
- 2.15.2
- 2.15.3
- 2.15.4
- 2.150.0
- 2.151.0
- 2.152.0
- 2.153.0
- 2.154.0
- 2.155.0
- 2.156.0
- 2.157.0
- 2.158.0
- 2.159.0
- 2.16.0
- 2.16.0.post0
- 2.16.1
- 2.16.2
- 2.16.3
- 2.16.3.post0
- 2.16.4
- 2.160.0
- 2.161.0
- 2.162.0
- 2.163.0
- 2.164.0
- 2.165.0
- 2.166.0
- 2.167.0
- 2.168.0
- 2.169.0
- 2.17.0
- 2.170.0
- 2.171.0
- 2.172.0
- 2.173.0
- 2.174.0
- 2.175.0
- 2.176.0
- 2.177.0
- 2.177.1
- 2.178.0
- 2.179.0
- 2.18.0
- 2.180.0
- 2.181.0
- 2.182.0
- 2.183.0
- 2.184.0
- 2.184.0.post0
- 2.185.0
- 2.186.0
- 2.187.0
- 2.188.0
- 2.189.0
- 2.19.0
- 2.190.0
- 2.191.0
- 2.192.0
- 2.192.1
- 2.193.0
- 2.194.0
- 2.195.0
- 2.195.1
- 2.196.0
- 2.197.0
- 2.197.1
- 2.198.0
- 2.198.1
- 2.199.0
- 2.2.0
- 2.20.0
- 2.200.0
- 2.200.1
- 2.201.0
- 2.202.0
- 2.202.1
- 2.203.0
- 2.203.1
- 2.204.0
- 2.205.0
- 2.206.0
- 2.207.0
- 2.207.1
- 2.208.0
- 2.209.0
- 2.21.0
- 2.210.0
- 2.211.0
- 2.212.0
- 2.213.0
- 2.214.0
- 2.214.1
- 2.214.2
- 2.214.3
- 2.215.0
- 2.216.0
- 2.216.1
- 2.217.0
- 2.218.0
- 2.218.1
- 2.219.0
- 2.22.0
- 2.220.0
- 2.221.0
- 2.221.1
- 2.222.0
- 2.222.1
- 2.223.0
- 2.224.0
- 2.224.1
- 2.224.2
- 2.224.3
- 2.224.4
- 2.225.0
- 2.226.0
- 2.226.1
- 2.227.0
- 2.228.0
- 2.229.0
- 2.23.0
- 2.23.1
- 2.23.2
- 2.23.3
- 2.23.4
- 2.23.4.post0
- 2.23.5
- 2.23.6
- 2.230.0
- 2.231.0
- 2.232.0
- 2.232.1
- 2.232.2
- 2.232.3
- 2.233.0
- 2.234.0
- 2.235.0
- 2.235.1
- 2.235.2
- 2.236.0
- 2.237.0
- 2.237.1
- 2.237.3
- 2.238.0
- 2.239.0
- 2.239.1
- 2.239.2
Auf 2.256.0 aktualisieren; Auf 3.2.0 aktualisieren
Originalquellen
- https://aws.amazon.com/security/security-bulletins/2026-004-AWS/
- https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-rjrp-m2jw-pv9c
- https://github.com/aws/sagemaker-python-sdk/releases/tag/v3.2.0
- https://github.com/aws/sagemaker-python-sdk/releases/tag/v2.256.0
- https://nvd.nist.gov/vuln/detail/CVE-2026-1777