This vulnerability (CVE-2026-9291) affects the Amazon Braket Python SDK versions prior to 1.117.0. It is caused by insecure deserialization of untrusted data within the job results processing component. An attacker with remote authenticated access and S3 write permissions to the job output bucket could exploit this flaw to execute arbitrary code on any machine that processes the job results. The vulnerability is classified under CWE-502 and has a CVSS 3.1 base score of 7.1, reflecting high severity with network attack vector, high impact on confidentiality, integrity, and availability, and requiring low privileges but user interaction. AWS provides a fix in version 1.117.0 and later. As this is a cloud service, AWS manages remediation server-side, and users should upgrade their SDK accordingly.

Successful exploitation allows remote authenticated users with S3 write access to the job output bucket to execute arbitrary code on machines processing job results, potentially compromising confidentiality, integrity, and availability of affected systems. This could lead to full system compromise of the processing environment. No known exploits in the wild have been reported so far.

AWS recommends upgrading the Amazon Braket Python SDK to version 1.117.0 or later, which contains the fix for this vulnerability. Since this is a cloud-hosted service, AWS manages remediation on their side, but users must update their SDK to ensure protection. Check the AWS security bulletin at https://aws.amazon.com/security/security-bulletins/2026-036-aws/ for the latest remediation details and guidance.