Vulnerabilities
SageMaker SDK Bucket Ownership Gap Risks Credential Theft and Code Execution
Attackers can execute code and steal credentials by creating predictably named buckets that the SDK uses without ownership checks.
Python SDK
Everything Firewall Pulse has reported about Python SDK: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
Command Injection Risk in AWS Bedrock AgentCore Python SDK Install Routine
Unsanitised arguments in the package installer could let authenticated users run arbitrary code inside the managed sandbox environment.