CVE-2026-83551: Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path
Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid integrity signatures for specially crafted function payloads, achieving code execution in another user's pipeline execution context within the same AWS account.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
AWS accounts using the SageMaker Python SDK @step or @remote decorator pipeline components in versions before v3.11.0 or v2.256.0 are affected. Exploitation can impact another user's pipeline execution context within the same AWS account.
What access does an attacker need?
The attacker must be an authenticated remote user able to obtain SageMaker DescribePipeline API responses containing the exposed HMAC signing key. The supplied vector also indicates high privileges are required.
What could an attacker do with the exposed key?
An attacker could forge valid integrity signatures for specially crafted function payloads. This can result in code execution in another user's pipeline execution context in the same AWS account.
Which versions address the issue?
Upgrade the SageMaker Python SDK to v3.11.0 or later, or v2.256.0 or later, depending on the SDK release line in use.