Sagemaker Distribution
Monthly
OS command injection in the Studio Space startup validation script of Amazon SageMaker Distribution (2.x, 3.x, and 4.x lines, as used by Amazon SageMaker Unified Studio) allows an authenticated remote user with project contributor permissions to execute arbitrary commands inside another project member's Studio Space and steal that member's temporary execution-role credentials via a crafted connection resource property. Exploitation is a shared/multi-tenant insider or compromised-collaborator scenario rather than unauthenticated external access, and it is additionally gated by user interaction because the victim's Studio Space must start and run the vulnerable startup script for the injected command to reach that member. No public exploit identified at time of analysis; vendor-released patches exist for supported lines, and end-of-support minor lines will not receive a fix.
OS command injection in the Studio Space startup validation script of Amazon SageMaker Distribution (2.x, 3.x, and 4.x lines, as used by Amazon SageMaker Unified Studio) allows an authenticated remote user with project contributor permissions to execute arbitrary commands inside another project member's Studio Space and steal that member's temporary execution-role credentials via a crafted connection resource property. Exploitation is a shared/multi-tenant insider or compromised-collaborator scenario rather than unauthenticated external access, and it is additionally gated by user interaction because the victim's Studio Space must start and run the vulnerable startup script for the injected command to reach that member. No public exploit identified at time of analysis; vendor-released patches exist for supported lines, and end-of-support minor lines will not receive a fix.