Description
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might allow an authenticated remote user with project contributor permissions to execute arbitrary commands in another project member's Studio Space and obtain that member's temporary execution role credentials via a crafted connection resource property that is interpolated into a shell invocation without neutralization.



To remediate this issue, users should upgrade to version 2.14.12, 3.9.12, 4.0.11, 4.1.11, 4.2.8, 4.3.5, or 4.4.3, as applicable to the minor line in use. Users on minor lines that have reached end of support must move to a supported minor line, because no patched version will be released for those lines. In Amazon SageMaker Unified Studio, Studio Spaces adopt the latest patch of their minor line on restart once the patched images are deployed, so no version selection is required.
Published: 2026-10-02
Score: 9.3 Critical
EPSS: 1.4% Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A command injection flaw exists in the Studio Space startup validation script of Amazon SageMaker Distribution. An authenticated user with project contributor permissions can craft a connection resource property that is incorporated unsanitized into a shell invocation, allowing execution of arbitrary commands. The exploit can also provide attackers with temporary execution role credentials of other project members, potentially enabling broader compromise.

Affected Systems

Amazon SageMaker Distribution versions 2.x (before 2.14.12), 3.x (before 3.9.12), 4.0.x (before 4.0.11), 4.1.x (before 4.1.11), 4.2.x (before 4.2.8), 4.3.x (before 4.3.5), and 4.4.x (before 4.4.3) when deployed in Amazon SageMaker Unified Studio.

Risk and Exploitability

The vulnerability carries a CVSS score of 9.3 and is not listed in the CISA KEV catalog. The EPSS score is 1%, but the high CVSS indicates significant risk. Attackers need valid contributor access within a project; once authenticated, they can execute commands on a different project member’s Studio Space. Because no patch will be released for unsupported minor lines, vulnerable instances remain at risk until an upgrade is performed.

Generated by OpenCVE AI on October 3, 2026 at 14:35 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade SageMaker Distribution to the latest available patch for the used minor line (e.g., 2.14.12, 3.9.12, 4.0.11, 4.1.11, 4.2.8, 4.3.5, or 4.4.3).
  • If your minor line has reached end of support, migrate to a supported minor line to receive security updates, as no further patches will be issued for the current line.
  • Restart Studio Spaces to allow them to pull the updated images; no additional version configuration is required.

Generated by OpenCVE AI on October 3, 2026 at 14:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 09 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 09 Oct 2026 16:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:aws:sagemaker-distribution:*:*:*:*:*:*:*:*

Sun, 04 Oct 2026 22:15:00 +0000

Type Values Removed Values Added
First Time appeared Aws
Aws sagemaker-distribution
Vendors & Products Aws
Aws sagemaker-distribution

Fri, 02 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
References

Fri, 02 Oct 2026 20:15:00 +0000

Type Values Removed Values Added
Description OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might allow an authenticated remote user with project contributor permissions to execute arbitrary commands in another project member's Studio Space and obtain that member's temporary execution role credentials via a crafted connection resource property that is interpolated into a shell invocation without neutralization. To remediate this issue, users should upgrade to version 2.14.12, 3.9.12, 4.0.11, 4.1.11, 4.2.8, 4.3.5, or 4.4.3, as applicable to the minor line in use. Users on minor lines that have reached end of support must move to a supported minor line, because no patched version will be released for those lines. In Amazon SageMaker Unified Studio, Studio Spaces adopt the latest patch of their minor line on restart once the patched images are deployed, so no version selection is required.
Title OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio
Weaknesses CWE-78
References
Metrics cvssV3_1

{'score': 9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L'}

Subscriptions

Aws Sagemaker-distribution
cve-icon MITRE

Status: PUBLISHED

Assigner: AMZN

Published:

Updated: 2026-10-09T16:37:11.836Z

Reserved: 2026-10-01T16:57:39.545Z

Link: CVE-2026-104019

cve-icon Vulnrichment

Updated: 2026-10-02T20:25:12.583Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-02T20:17:00.607

Modified: 2026-10-06T18:16:43.043

Link: CVE-2026-104019

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-04T20:53:05Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')