---
cve: "CVE-2026-112408"
severity: "CRITICAL"
cvss: 9.4
epss: ""
vendor: "aws"
kev: false
exploited: false
published: "2026-10-21 20:17:23"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-10-27T10:31:01+01:00"
---

# CVE-2026-112408

> 9.4 CRITICAL · 🧪 PoC

## Beschreibung

Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably named S3 bucket that the SDK uses without ownership validation.



To remediate this issue, users should upgrade to Amazon SageMaker Python SDK 3.10.0 (V3) or 2.257.3 (V2).

## CNA-Record (Kanon, cvelistV5)

- CNA: **AMZN**
- State: PUBLISHED
- Stand: 2026-10-21 19:47:47
- CNA-CVSS: **8.1** (`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`)

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |

## Schwachstellen-Klasse

- **CWE-940** — Improper Verification of Source of a Communication Channel
  The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.

## Angriffsmuster (CAPEC)

- [CAPEC-500 — WebView Injection](https://capec.mitre.org/data/definitions/500.html)
- [CAPEC-594 — Traffic Injection](https://capec.mitre.org/data/definitions/594.html)
- [CAPEC-595 — Connection Reset](https://capec.mitre.org/data/definitions/595.html)
- [CAPEC-596 — TCP RST Injection](https://capec.mitre.org/data/definitions/596.html)

## Patch verfügbar (OSV)

- 07d5847908923e9a15d2616f9fddb844e89e0fe8 (Commit)
- 1a3bda24287f17d9ab9c39db7103e236f34f247f (Commit)

## Referenzen

- <https://github.com/aws/sagemaker-python-sdk/releases/tag/v2.257.3>
- <https://github.com/aws/sagemaker-python-sdk/releases/tag/v3.10.0>
- <https://pypi.org/project/sagemaker/3.10.0/>
- <https://pypi.org/project/sagemaker/2.257.3/>
- <https://aws.amazon.com/security/security-bulletins/2026-142-aws/>
- <https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-5rx8-8fr2-f855>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2026-112408/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_