Executive brief
sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
Affected products
- PyPI sagemaker
Junglewise Threat Intelligence
CVE-2024-34072: PYSEC-2026-1889 - sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
CVE-2024-34072 · Severity: low · CVSS 3.1 · Published 2026-07-07
Vendors: PyPI.
Related threats
- PYSEC-2026-1888 - SageMaker Python SDK has Exposed HMAC
- PYSEC-2026-1886 - SageMaker Python SDK has Insecure TLS Configuration
- PYSEC-2026-1885 - SageMaker Workflow component allows possibility of MD5 hash collisions
- PYSEC-2026-1887 - sagemaker-python-sdk Command Injection vulnerability
- Amazon SageMaker Python SDK code execution in Triton inference handler