CVE-2026-110248 - Insertion of sensitive information into log files in Amazon SageMaker Python SDK
Description
CVE-2026-110248 is a vulnerability in the Amazon SageMaker Python SDK where repository credentials may be logged in plaintext to CloudWatch Logs during a failed Git clone operation. This occurs in the git_utils.py component and affects versions prior to 2.257.3 for V2 and prior to 3.10.0 for V3 of the SDK. An authenticated user with access to these logs could retrieve sensitive credentials. AWS has published a security bulletin addressing this issue.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Amazon SageMaker Python SDK contains a vulnerability (CVE-2026-110248) in its git_utils.py component. When a Git clone operation fails, the subprocess error output includes repository credentials that are logged to CloudWatch Logs without redaction. This allows an authenticated remote user with access to these logs to obtain plaintext repository credentials. The issue affects Amazon SageMaker Python SDK V2 versions before 2.257.3 and V3 versions before 3.10.0.
Potential Impact
An authenticated user with access to CloudWatch Logs can obtain plaintext repository credentials that were logged during a failed Git clone operation. This exposure of sensitive information could lead to unauthorized access to Git repositories or other resources protected by those credentials.
Mitigation Recommendations
AWS has identified fixed versions for this vulnerability: upgrade to Amazon SageMaker Python SDK V2 version 2.257.3 or later, or V3 version 3.10.0 or later. Users should update to these versions to prevent sensitive credential leakage in logs. No other mitigations are specified in the bulletin.
Technical Details
- Classification
- {"confidence":0.88,"severitySource":"default","classifier":"rss-v2"}
- Article Source
- {"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-134-aws/","fetched":true,"fetchedAt":"2026-10-14T18:49:47.772Z","wordCount":232}
Threat ID: 6acfcecb2cdf04f656a202b8
Added to database: 10/14/2026, 18:49:47 UTC
Last enriched: 10/14/2026, 18:49:51 UTC
Last updated: 10/14/2026, 18:49:51 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.