Dashboard / CVE-2026-8597

CVE-2026-8597

MEDIUM
MEDIUM Priority: 0.03 BB Relevance: 58/100
Published: 2026-05-14 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: X
AT: None
VC: None
VI: None
VA: None

Description

Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to achieve code execution in inference containers via replacement of model artifacts in S3 with a specially crafted pickle payload that is deserialized without verification. This issue requires a remote authenticated actor with S3 write access to the model artifact path. To remediate this issue, we recommend upgrading to Amazon SageMaker Python SDK v2.257.2 or v3.8.0 and rebuild any Triton models previously created with ModelBuilder using the updated SDK.

Weakness Classification (1)

References & Advisories (4)

Bug Bounty Relevance

58 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

6.4 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.51%
Raw Score 0.005070
Percentile 43.2%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00507
2026-10-28
0.00507

Intelligence Sources

nvd ref →

External Links