Search: CVE-2026-124035

CVE-2026-124035 is a high-severity vulnerability in Amazon's amazon-braket-schemas package before version 1.32.2. It involves unsafe reflection in the error mitigation schema validation, which could allow a remote authenticated user with S3 write access to the quantum task output location to execute arbitrary code on any machine that processes crafted quantum task results. The issue is fixed in version 1.32.2.

Two vulnerabilities, CVE-2026-124034 and CVE-2026-124035, were identified in the Amazon Braket SDK, an open source Python library for running quantum tasks on Amazon Braket. CVE-2026-124034 affects the local hybrid job input data download process, while CVE-2026-124035 involves error mitigation schema validation in the Amazon Braket Schemas library. The affected versions include amazon-braket-sdk versions from 1.10.0 up to but not including 1.32.2, including version 1.17.0. No detailed impact or exploit information is provided in the bulletin. The vendor advisory suggests referring to the article for the most current information.