# CVE-2026-1778: PYSEC-2026-1886 - SageMaker Python SDK has Insecure TLS Configuration

Source: https://junglewise.ai/threats/cve-2026-1778-sagemaker-python-sdk-has-insecure-tls-configuration  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-07  
License: CC BY 4.0 with a link back

CVE-2026-1778 · Severity: low · CVSS 3.1 · Published 2026-07-07

SageMaker Python SDK has Insecure TLS Configuration

Technologies: [sagemaker (PyPI)](https://junglewise.ai/threats/technologies/pypi-sagemaker). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-1778 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-1778 being exploited in the wild.

**How severe is CVE-2026-1778?** Low severity, with a CVSS score of 3.1, published 7 July 2026.

**Which products and versions are affected?** sagemaker (PyPI) ECOSYSTEM:introduced=0,fixed=2.256.0,introduced=3.0,fixed=3.1.1, ECOSYSTEM:introduced=3.0,fixed=3.1.1.

**Is there a fix for CVE-2026-1778?** Yes. sagemaker (PyPI): upgrade to 3.1.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**Am I affected by CVE-2026-1778?** Check whether you run sagemaker (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- sagemaker (PyPI): upgrade to 3.1.1 or later

  ```sh
  pip install "sagemaker>=3.1.1"
  ```


## Affected products

- sagemaker (PyPI) ECOSYSTEM:introduced=0,fixed=2.256.0,introduced=3.0,fixed=3.1.1, ECOSYSTEM:introduced=3.0,fixed=3.1.1

## Identifiers

- CVE-2026-1778
- GHSA-62rc-f4v9-h543
- PYSEC-2026-1886

## Related threats

- [PYSEC-2026-1888 - SageMaker Python SDK has Exposed HMAC](https://junglewise.ai/threats/cve-2026-1777-aws-sagemaker-python-sdk-hmac-disclosure-and-insecure-tls)
- [PYSEC-2026-1885 - SageMaker Workflow component allows possibility of MD5 hash collisions](https://junglewise.ai/threats/cve-2025-0508-aws-sagemaker-python-sdk-md5-hash-collision-in-workflow-component)
- [PYSEC-2026-1887 - sagemaker-python-sdk Command Injection vulnerability](https://junglewise.ai/threats/cve-2024-34073-sagemaker-python-sdk-command-injection-vulnerability)
- [PYSEC-2026-1889 - sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data](https://junglewise.ai/threats/cve-2024-34072-sagemaker-python-sdk-vulnerable-to-deserialization-of-untrusted)
- [Amazon SageMaker Python SDK code execution in Triton inference handler](https://junglewise.ai/threats/cve-2026-8597-amazon-sagemaker-python-sdk-code-execution-in-triton-inference)