Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-1778

TLS disabled by default in select aws/sagemaker-python-sdk configurations

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMZN

Description

Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succeed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AWS SageMaker Python SDK

Default version status: unaffected

  • 3.1.1unaffected
  • 2.256.0unaffected

References