Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK
UnratedCVE-2026-83551 · Published Sep 1, 2026 · updated Sep 9, 2026
Bulletin ID: 2026-093-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/01/2026 11:00 AM PDT Description: SageMaker Python SDK's @step and @remote decorator pipeline component uses an HMAC key to protect the integrity of serialized function payloads stored in S3. We identified an issue where the HMAC secret key is stored in cleartext within pipeline definitions and accessible via the DescribePipeline API. This allows an actor with a role in that account that has permissions to invoke DescribePipeline to extract the key, create cloud-pickled payloads with valid HMACs, and overwrite S3 objects, achieving code execution in another user's pipeline execution context within the same AWS account. Impacted versions: - HMAC Configuration in SageMaker Python SDK v3 < v3.11.0 - HMAC Configuration in SageMaker Python SDK v2 < v2.256.0 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Affected versions
Details and references
- Severity from
- no source yet
More AWS advisories
All AWS| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 4 | Unverified access point ownership in Amazon EFS CSI Driver UnratedSep 4 | Unrated | No fix yet |
| Sep 4 | Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-serverUnratedSep 4 | Unrated | No fix yet |
| Sep 3 | Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development...UnratedSep 3 | Unrated | No fix yet |
| Sep 3 | OS command injection in the Amazon CodeCatalyst blueprints SDKUnratedSep 3 | Unrated | No fix yet |
| Sep 2 | Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6UnratedSep 2 | Unrated | No fix yet |
| Aug 31 | OpenSearch SQL Plugin - Unrestricted Java Deserialization in Cursor PaginationUnratedAug 31 | Unrated | No fix yet |