
Vulnerabilities
How Cleartext HMAC Keys in SageMaker SDK Enable Code Execution
A flaw in the Amazon SageMaker Python SDK exposes signing keys in cleartext, allowing attackers to forge payloads and run code in other users' pipelines.
Everything Sandbox Dispatch has reported about Python SDK: 2 stories, newest first. Part of our Vulnerabilities coverage.

A flaw in the Amazon SageMaker Python SDK exposes signing keys in cleartext, allowing attackers to forge payloads and run code in other users' pipelines.

Two vulnerabilities in the SageMaker Python SDK allow attackers to bypass integrity verification, potentially leading to the execution of tampered machine learning models.