CVE-2026-9291
CVE-2026-9291 · Insecure Deserialization in Amazon Braket SDK Job Results Processing
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. We recommend you upgrade to amazon-braket-sdk version 1.117.0 or later.
CVSS 7.5 · Élevée · EPSS 0,4% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: python
Produits et versions concernés
amazon braket python sdk
- Versions du logiciel
- ≥ 1.10.0, < 1.117.0: Concernée (custom)
Mettez à jour vers 1.117.0
amazon-braket-sdk PyPI
- Versions du logiciel
- 1.10.0
- 1.100.0
- 1.100.1
- 1.101.0
- 1.101.0.post0
- 1.102.0
- 1.102.1
- 1.102.10
- 1.102.2
- 1.102.3
- 1.102.4
- 1.102.5
- 1.102.6
- 1.102.7
- 1.102.8
- 1.102.9
- 1.103.0
- 1.104.0
- 1.104.1
- 1.105.0
- 1.106.0
- 1.106.1
- 1.106.2
- 1.106.3
- 1.106.4
- 1.106.5
- 1.107.0
- 1.108.0
- 1.108.1
- 1.109.0
- 1.11.0
- 1.11.1
- 1.110.0
- 1.110.1
- 1.111.0
- 1.111.1
- 1.111.2
- 1.112.0
- 1.112.1
- 1.113.0
- 1.113.1
- 1.114.0
- 1.115.0
- 1.116.0
- 1.12.0
- 1.13.0
- 1.14.0
- 1.14.0.post0
- 1.15.0
- 1.16.0
- 1.16.1
- 1.17.0
- 1.18.0
- 1.18.0.post0
- 1.18.1
- 1.18.2
- 1.19.0
- 1.20.0
- 1.21.0
- 1.21.1
- 1.22.0
- 1.23.0
- 1.23.1
- 1.23.2
- 1.24.0
- 1.25.0
- 1.25.1
- 1.25.1.post0
- 1.25.2
- 1.26.0
- 1.26.1
- 1.26.2
- 1.27.0
- 1.27.1
- 1.28.0
- 1.28.1
- 1.29.0
- 1.29.0.post0
- 1.29.1
- 1.29.2
- 1.29.3
- 1.29.4
- 1.30.0
- 1.30.1
- 1.30.2
- 1.31.0
- 1.31.1
- 1.32.0
- 1.32.1
- 1.32.1.post0
- 1.33.0
- 1.33.0.post0
- 1.33.1
- 1.33.2
- 1.34.0
- 1.34.1
- 1.34.2
- 1.34.3
- 1.34.3.post0
- 1.35.0
- 1.35.1
- 1.35.2
- 1.35.3
- 1.35.4
- 1.35.4.post0
- 1.35.5
- 1.36.0
- 1.36.1
- 1.36.2
- 1.36.2.post0
- 1.36.3
- 1.36.4
- 1.36.5
- 1.37.0
- 1.37.1
- 1.38.0
- 1.38.1
- 1.38.2
- 1.38.3
- 1.39.0
- 1.39.1
- 1.40.0
- 1.41.0
- 1.42.0
- 1.42.1
- 1.42.2
- 1.43.0
- 1.44.0
- 1.45.0
- 1.46.0
- 1.47.0
- 1.48.0
- 1.48.1
- 1.49.0
- 1.49.1
- 1.49.1.post0
- 1.50.0
- 1.51.0
- 1.52.0
- 1.53.0
- 1.53.0.post0
- 1.53.1
- 1.53.2
- 1.53.3
- 1.53.4
- 1.54.0
- 1.54.1
- 1.54.2
- 1.54.3
- 1.54.3.post0
- 1.55.0
- 1.55.1
- 1.55.1.post0
- 1.56.0
- 1.56.1
- 1.56.2
- 1.57.0
- 1.57.1
- 1.57.2
- 1.58.0
- 1.58.1
- 1.59.0
- 1.59.1
- 1.59.1.post0
- 1.59.2
- 1.60.2
- 1.61.0
- 1.61.0.post0
- 1.62.0
- 1.62.1
- 1.63.0
- 1.64.0
- 1.64.1
- 1.64.2
- 1.65.0
- 1.65.1
- 1.66.0
- 1.67.0
- 1.68.0
- 1.68.1
- 1.68.2
- 1.68.3
- 1.69.0
- 1.69.1
- 1.70.0
- 1.70.1
- 1.70.2
- 1.70.3
- 1.71.0
- 1.72.0
- 1.72.1
- 1.72.2
- 1.73.0
- 1.73.1
- 1.73.2
- 1.73.3
- 1.74.0
- 1.74.1
- 1.75.0
- 1.76.0
- 1.76.1
- 1.76.2
- 1.76.3
- 1.77.0
- 1.77.1
- 1.77.2
- 1.77.3
- 1.77.3.post0
- 1.77.4
- 1.77.5
- 1.77.6
- 1.78.0
- 1.79.0
- 1.79.1
- 1.80.0
- 1.80.1
- 1.81.0
- 1.81.1
- 1.82.0
- 1.83.0
- 1.84.0
- 1.85.0
- 1.86.0
- 1.86.1
- 1.87.0
- 1.87.1
- 1.88.0
- 1.88.1
- 1.88.2
- 1.88.2.post0
- 1.88.3
- 1.89.0
- 1.89.1
- 1.90.0
- 1.90.1
- 1.90.2
- 1.91.0
- 1.91.1
- 1.91.2
- 1.92.0
- 1.93.0
- 1.94.0
- 1.95.0
- 1.96.0
- 1.96.1
- 1.97.0
- 1.98.0
- 1.99.0
- Plages de versions concernées
- ECOSYSTEM: ≥ 1.10.0, < 1.117.0
Mettez à jour vers 1.117.0