SCA: security update for sagemaker (GHSA-rq6v-x3j8-7qgf)

medium Tenable Self-Hosted Container Security Plugin ID 442258

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before
v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to achieve code execution in
inference containers via replacement of model artifacts in S3 with a specially crafted pickle payload that
is deserialized without verification. This issue requires a remote authenticated actor with S3 write
access to the model artifact path. To remediate this issue, we recommend upgrading to Amazon SageMaker
Python SDK v2.257.2 or v3.8.0 and rebuild any Triton models previously created with ModelBuilder using the
updated SDK. (CVE-2026-8597)

Solution

Update the sagemaker library and its related packages to version 2.257.2 or later.

Plugin Details

Severity: Medium

ID: 442258

Version: Revision 1.4

Type: Local

Family: SCA Checks

Published: 5/21/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.96

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: High

Base Score: 8.3

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C

CVSS Score Source: CVE-2026-8597

CVSS v3

Risk Factor: High

Base Score: 7.2

Temporal Score: 6.3

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: Medium

Base Score: 6.4

Threat Score: 2.5

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 5/21/2026

Vulnerability Publication Date: 5/14/2026

Reference Information

CVE: CVE-2026-8597

cwe: CWE-354

Detections

Analytics