CVE-2026-1777 json
Cleartext transmission of sensitive materials in aws/sagemaker-python-sdk
published 2026-02-02 9 mo ago modified 2026-07-07 4 mo ago also GHSA-rjrp-m2jw-pv9c , PYSEC-2026-1888 , EUVD-2026-5264
- cvss
- 7.2
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 43%
- public exploits
- 0
- none known
Summary
The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function. A third party with permissions to both call this API and permissions to modify objects in the Training Jobs S3 output location may have the ability to upload arbitrary artifacts which are executed the next time the Training Job is invoked.
Patch / fix
- pypi sagemaker 2.256.0, 3.2.0
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 9 mo ago
Exploit prediction
0.51% chance of exploitation in the next 30 days, higher than 43% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| CNA | 4.0 | 8.5 | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H |
| CNA | 4.0 | 8.5 | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| OSV | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | sagemaker | >=3.0, <3.2.0 <2.256.0 |
3.2.0 2.256.0 |
Affected products
- AWS SageMaker Python SDK
Classification
References
-
github.com
/aws/sagemaker-python-sdk/releases/tag/v3.2.0
patch, web
-
github.com
/aws/sagemaker-python-sdk/releases/tag/v2.256.0
patch, web
-
github.com
/aws/sagemaker-python-sdk/commit/708c7b2f4135ecaec55973d098f3dbe98b657933
web
-
github.com
/aws/sagemaker-python-sdk/commit/fb0d789db4fd5fecde5509963939369f4c7ce63b
web
-
aws.amazon.com
/security/security-bulletins/2026-004-AWS/
vendor-advisory
-
github.com
/aws/sagemaker-python-sdk/security/advisories/GHSA-rjrp-m2jw-pv9c
third-party-advisory, web
-
nvd.nist.gov
/vuln/detail/CVE-2026-1777
advisory
-
aws.amazon.com
/security/security-bulletins/2026-004-AWS
web
-
github.com
/aws/sagemaker-python-sdk
package
-
pypi.org
/project/sagemaker
package
-
github.com
/advisories/GHSA-rjrp-m2jw-pv9c
advisory
Sources
- CVE List CVE-2026-1777
- GitHub Advisory GHSA-rjrp-m2jw-pv9c
- NVD CVE-2026-1777
- OSV PYSEC-2026-1888
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.