{"id":18225,"date":"2026-10-15T23:09:30","date_gmt":"2026-10-16T05:09:30","guid":{"rendered":"https:\/\/www.supportpro.com\/blog\/?p=18225"},"modified":"2026-10-15T23:09:34","modified_gmt":"2026-10-16T05:09:34","slug":"cve-2026-110248-sagemaker-sdk-security-fix","status":"publish","type":"post","link":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/","title":{"rendered":"CVE-2026-110248: SageMaker SDK Security Fix"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A failed Git clone may seem like a small development issue. But what if the error message contains your Git credentials?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That is the risk behind CVE-2026-110248, a security vulnerability in the Amazon SageMaker Python SDK. When a Git clone operation fails, the SDK may write sensitive repository credentials to Amazon CloudWatch Logs without removing them first.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If someone can access those logs, they could retrieve the exposed credentials and use them to access a private repository.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AWS published its security advisory on October 14, 2026, and released fixed SDK versions. If your team uses Amazon SageMaker for machine learning, now is a good time to check your SDK versions, review relevant logs, and secure any exposed credentials.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;In this guide, we\u2019ll explain what the vulnerability means, which <strong>SageMaker Python SDK versions are affected<\/strong>, and <strong>how to fix CVE-2026-110248<\/strong> step by step.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What Exactly Is CVE-2026-110248?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The bug lives in a file called <strong>git_utils.py <\/strong>inside the SageMaker Python SDK. Here is how it plays out:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. Your job tries to clone a private Git repository.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. The clone fails.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. The SDK writes the error output to CloudWatch Logs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4. That output can include your repository credentials, with nothing hidden or blocked.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So anyone who can read those logs can read your credentials in plain text. AWS says this person must be signed in and already have access to the logs. Still, many teams share log access more widely than they realize.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here is an easy way to picture it. Say your machine learning pipeline needs a private repo before a training job starts. The clone fails, and your login details land in the job logs. Nobody meant to share them, but they sit there all the same.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AWS has already released fixed SDK versions and recommends that you upgrade. Acting early is the safest move.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Want to read the source? Here is AWS&#8217;s official bulletin: <a href=\"https:\/\/aws.amazon.com\/security\/security-bulletins\/2026-134-aws\/\">https:\/\/aws.amazon.com\/security\/security-bulletins\/2026-134-aws\/<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Which SageMaker Python SDK Versions Are Affected?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AWS has identified the following affected versions and fixes:<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><a href=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SupportPro-SDK-release-infographic.png\" data-rel=\"penci-gallery-image-content\" ><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"658\" src=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SupportPro-SDK-release-infographic-1024x658.png\" alt=\"SupportPRO infographic showing affected and fixed Amazon SageMaker Python SDK versions for CVE-2026-110248: V2 versions earlier than 2.257.3 and V3 versions earlier than 3.10.0.\" class=\"wp-image-18229\" style=\"aspect-ratio:1.556266216134677;width:579px;height:auto\" srcset=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SupportPro-SDK-release-infographic-1024x658.png 1024w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SupportPro-SDK-release-infographic-300x193.png 300w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SupportPro-SDK-release-infographic-767x493.png 767w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SupportPro-SDK-release-infographic-1170x752.png 1170w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SupportPro-SDK-release-infographic-585x376.png 585w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SupportPro-SDK-release-infographic.png 1400w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">These versions address CVE-2026-110248. However, upgrading to the latest compatible release is preferable to stopping at the minimum fixed version.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Also, check every environment that runs the SDK. Updating your local development machine does not automatically update your notebooks, production containers, or CI\/CD pipelines.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How to Fix CVE-2026-110248<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">You can fix this in five steps. Take them one at a time.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>1. See What Version Is Installed<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Open your SageMaker Python environment and run this command to check your SageMaker SDK version:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>python -m pip show sagemaker<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Then compare your version with the table above. Look inside your dependency files and container configs too. Teams often pin an old version during deployment and forget about it.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>2. Upgrade<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you use SDK V2, run:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>python -m pip install &#8211;upgrade &#8220;sagemaker&gt;=2.257.3,&lt;3&#8221;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you use SDK V3, run:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>python -m pip install &#8211;upgrade &#8220;sagemaker&gt;=3.10.0&#8221;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">After the upgrade, test your training jobs and automation to make sure they still work. Update your lock files and rebuild your containers if you need to. If you keep a custom fork of the SDK, add the fix to it as well.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>3. Review CloudWatch Logs<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Find the log groups that belong to your SageMaker workloads. Then read the logs from the time you ran an older version, and pay special attention to failed Git clone attempts. Look for repo URLs, tokens, passwords and anything else sensitive.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you find a secret, don&#8217;t copy it into chats or tickets. Copying it only spreads the problem.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>4. Rotate Exposed Credentials<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you spot a credential in a log, treat it as if someone already took it. Revoke it or replace it right away. Give the new token the minimum permissions it needs. Then check your repo access records for anything unusual. If you&#8217;re reviewing exposed credentials across your AWS environment, our guide on <a href=\"https:\/\/www.supportpro.com\/blog\/aws-security-dealing-with-exposed-aws-access-keys\/\" target=\"_blank\" rel=\"noopener\">responding to exposed AWS access keys<\/a> explains additional steps for revoking compromised keys, reviewing access, and strengthening your security practices.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>5. Check Log Permissions<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Review who can open those CloudWatch log groups. That means users, roles and services. Keep access tight, and watch out for cross-account sharing and shared dev environments. Fewer readers means fewer chances for a leak.Can&#8217;t upgrade today? Don&#8217;t put credentials in your repo URLs, and limit who can read the affected logs until you can.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Access control is an important part of securing AWS resources. You can also learn how to <a href=\"https:\/\/www.supportpro.com\/blog\/how-to-securely-access-amazon-ec2-without-ssh-keys-using-aws-session-manager\/\">secure AWS access with Session Manager<\/a> to understand another way to manage access to your cloud infrastructure.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How to Prevent Similar Credential Exposure in the Future<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Fixing CVE-2026-110248 is important, but good security practices can help reduce the risk of similar problems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are five habits worth building into your development and cloud operations processes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1. Keep Dependencies Updated<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Security fixes often arrive through new package releases. Monitor relevant security advisories and update vulnerable dependencies promptly. Automated dependency checks can help identify outdated packages before they reach production.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>2. Store Credentials Securely<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Avoid embedding passwords or access tokens directly in Git repository URLs, source code, or configuration files. Use an appropriate secrets management solution and limit each credential&#8217;s permissions to the tasks it needs to perform.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>3. Prevent Sensitive Data From Entering Logs<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Logs help developers troubleshoot problems, but they should not expose passwords, access tokens, or other secrets. Review logging practices and configure applications to avoid recording sensitive authentication details. Redaction can provide an additional layer of protection, but it should not replace secure credential handling.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>4. Automate Security Checks in CI\/CD Pipelines<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Include dependency scanning and security checks in your continuous integration and continuous delivery (CI\/CD) workflows. These checks can help your team catch vulnerable package versions before deploying applications or machine learning workloads.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>5. Audit Cloud Access Regularly<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Review IAM policies, CloudWatch Logs permissions, and other access controls on a regular basis. Remove unused permissions, restrict access to sensitive information, and investigate unexpected access patterns. Together, these practices help your team manage security risks more consistently instead of responding only when a new vulnerability appears.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For more practical guidance, explore our guide to <a href=\"https:\/\/www.supportpro.com\/blog\/steps-for-securing-your-cloud-infrastructure\/\">cloud security best practices<\/a> to learn how businesses can protect cloud resources and reduce common security risks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How SupportPRO Can Help With AWS Security and Management<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Keeping an AWS environment secure involves more than installing patches. Teams also need to manage access permissions, monitor infrastructure, review configurations, and maintain systems as security requirements change.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>SupportPRO provides<\/strong> <a href=\"https:\/\/www.supportpro.com\/aws_management.php\"><strong>AWS management<\/strong><\/a> <strong>and<\/strong> <a href=\"https:\/\/www.supportpro.com\/cloudsupport.php\"><strong>cloud support services<\/strong><\/a> <strong><\/strong>to help businesses handle these ongoing responsibilities. Its services include infrastructure management, patch management, user access management, server monitoring, and DevOps support.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If your team is reviewing CVE-2026-110248, SupportPRO can help assess broader AWS management needs, review relevant access controls, and plan ongoing maintenance alongside your internal development and security teams.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Final Thoughts<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>CVE-2026-110248<\/strong> is a useful reminder that even routine development errors can create security risks when sensitive information ends up in logs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you use <strong>Amazon SageMaker<\/strong>, start by checking your SDK version and upgrading any affected environments. Then review relvant <strong>CloudWatch Logs<\/strong>, rotate exposed credentials, and tighten access permissions where necessary.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A few targeted checks now can help you reduce the risk of credential misuse and build more secure <strong>AWS machine learning workflows<\/strong> over time.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"> Want to make AWS maintenance easier to manage?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Explore SupportPRO&#8217;s AWS Management Services to learn how its team can support your cloud infrastructure.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-content-justification-center is-layout-flex wp-container-core-buttons-is-layout-fe48e5de wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button is-style-fill\"><a class=\"wp-block-button__link has-white-color has-text-color has-background has-link-color wp-element-button\" href=\"https:\/\/www.supportpro.com\/aws_management.php\" style=\"background-color:#f07c28\">Explore AWS Management Services<\/a><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile is-vertically-aligned-center has-white-background-color has-background\"><div class=\"wp-block-media-text__content\">\n<p class=\"has-large-font-size wp-block-paragraph\">Facing issues? <\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Our technical support<br>engineers can solve it. <\/p>\n\n\n\n<!--HubSpot Call-to-Action Code --><span class=\"hs-cta-wrapper\" id=\"hs-cta-wrapper-3350a795-db50-482f-9911-301930d1b1be\"><span class=\"hs-cta-node hs-cta-3350a795-db50-482f-9911-301930d1b1be\" id=\"hs-cta-3350a795-db50-482f-9911-301930d1b1be\"><!--[if lte IE 8]><div id=\"hs-cta-ie-element\"><\/div><![endif]--><a href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/2725694\/3350a795-db50-482f-9911-301930d1b1be\" ><img decoding=\"async\" class=\"hs-cta-img\" id=\"hs-cta-img-3350a795-db50-482f-9911-301930d1b1be\" style=\"border-width:0px;\" src=\"https:\/\/no-cache.hubspot.com\/cta\/default\/2725694\/3350a795-db50-482f-9911-301930d1b1be.png\"  alt=\"Contact Us today!\"\/><\/a><\/span><script charset=\"utf-8\" src=\"https:\/\/js.hscta.net\/cta\/current.js\"><\/script><script type=\"text\/javascript\"> hbspt.cta.load(2725694, '3350a795-db50-482f-9911-301930d1b1be', {\"useNewLoader\":\"true\",\"region\":\"na1\"}); <\/script><\/span><!-- end HubSpot Call-to-Action Code -->\n<\/div><figure class=\"wp-block-media-text__media\"><img decoding=\"async\" width=\"904\" height=\"931\" src=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup.png\" alt=\"guy server checkup\" class=\"wp-image-12943 size-full\" srcset=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup.png 904w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-291x300.png 291w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-768x791.png 768w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-585x602.png 585w\" sizes=\"(max-width: 904px) 100vw, 904px\" \/><\/figure><\/div>\n","protected":false},"excerpt":{"rendered":"<p>A failed Git clone may seem like a small development issue. But what if the error message contains your Git credentials? That is the risk behind CVE-2026-110248, a security vulnerability&hellip;<\/p>\n","protected":false},"author":41,"featured_media":18226,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[69],"tags":[],"class_list":["post-18225","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aws"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Learn how to fix CVE-2026-110248, update affected SageMaker Python SDK versions, check CloudWatch Logs, and protect exposed Git credentials.\" \/>\n\t<meta name=\"robots\" content=\"max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n\t<meta name=\"author\" content=\"Tanisha Mathew\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Server Management Tips | SupportPRO Blog\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"CVE-2026-110248: Fix SageMaker SDK Vulnerability\" \/>\n\t\t<meta property=\"og:description\" content=\"Learn how to fix CVE-2026-110248, update affected SageMaker Python SDK versions, check CloudWatch Logs, and protect exposed Git credentials.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SageMaker-credential-exposure-blog-banner.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SageMaker-credential-exposure-blog-banner.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t\t<meta property=\"og:image:height\" content=\"960\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-10-16T05:09:30+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-10-16T05:09:34+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary\" \/>\n\t\t<meta name=\"twitter:title\" content=\"CVE-2026-110248: Fix SageMaker SDK Vulnerability\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Learn how to fix CVE-2026-110248, update affected SageMaker Python SDK versions, check CloudWatch Logs, and protect exposed Git credentials.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SageMaker-credential-exposure-blog-banner.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/#article\",\"name\":\"CVE-2026-110248: Fix SageMaker SDK Vulnerability\",\"headline\":\"CVE-2026-110248: SageMaker SDK Security Fix\",\"author\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/author\\\/tanisha-marmiasystems-com\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/SageMaker-credential-exposure-blog-banner.png\",\"width\":1920,\"height\":960,\"caption\":\"CVE-2026-110248: Fix SageMaker SDK Credential Exposure and Check CloudWatch Logs\"},\"datePublished\":\"2026-10-15T23:09:30-06:00\",\"dateModified\":\"2026-10-15T23:09:34-06:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/#webpage\"},\"articleSection\":\"AWS\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/aws\\\/#listItem\",\"name\":\"AWS\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/aws\\\/#listItem\",\"position\":2,\"name\":\"AWS\",\"item\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/aws\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/#listItem\",\"name\":\"CVE-2026-110248: SageMaker SDK Security Fix\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/#listItem\",\"position\":3,\"name\":\"CVE-2026-110248: SageMaker SDK Security Fix\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/aws\\\/#listItem\",\"name\":\"AWS\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#organization\",\"name\":\"SupportPRO\",\"description\":\"SupportPRO Blog\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/\",\"telephone\":\"+18476076123\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/author\\\/tanisha-marmiasystems-com\\\/#author\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/author\\\/tanisha-marmiasystems-com\\\/\",\"name\":\"Tanisha Mathew\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3a44dca8e0888dffd34573aa37d9bef5d6dfd090d786986af5e061eda54bec5f?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Tanisha Mathew\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/#webpage\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/\",\"name\":\"CVE-2026-110248: Fix SageMaker SDK Vulnerability\",\"description\":\"Learn how to fix CVE-2026-110248, update affected SageMaker Python SDK versions, check CloudWatch Logs, and protect exposed Git credentials.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/author\\\/tanisha-marmiasystems-com\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/author\\\/tanisha-marmiasystems-com\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/SageMaker-credential-exposure-blog-banner.png\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/#mainImage\",\"width\":1920,\"height\":960,\"caption\":\"CVE-2026-110248: Fix SageMaker SDK Credential Exposure and Check CloudWatch Logs\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2026-110248-sagemaker-sdk-security-fix\\\/#mainImage\"},\"datePublished\":\"2026-10-15T23:09:30-06:00\",\"dateModified\":\"2026-10-15T23:09:34-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/\",\"name\":\"Server Management Tips\",\"description\":\"SupportPRO Blog\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>CVE-2026-110248: Fix SageMaker SDK Vulnerability<\/title>\n\n","aioseo_head_json":{"title":"CVE-2026-110248: Fix SageMaker SDK Vulnerability","description":"Learn how to fix CVE-2026-110248, update affected SageMaker Python SDK versions, check CloudWatch Logs, and protect exposed Git credentials.","canonical_url":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/","robots":"max-snippet:-1, max-image-preview:large, max-video-preview:-1","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/#article","name":"CVE-2026-110248: Fix SageMaker SDK Vulnerability","headline":"CVE-2026-110248: SageMaker SDK Security Fix","author":{"@id":"https:\/\/www.supportpro.com\/blog\/author\/tanisha-marmiasystems-com\/#author"},"publisher":{"@id":"https:\/\/www.supportpro.com\/blog\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SageMaker-credential-exposure-blog-banner.png","width":1920,"height":960,"caption":"CVE-2026-110248: Fix SageMaker SDK Credential Exposure and Check CloudWatch Logs"},"datePublished":"2026-10-15T23:09:30-06:00","dateModified":"2026-10-15T23:09:34-06:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/#webpage"},"isPartOf":{"@id":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/#webpage"},"articleSection":"AWS"},{"@type":"BreadcrumbList","@id":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/#listItem","position":1,"name":"Home","item":"https:\/\/www.supportpro.com\/blog\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/category\/aws\/#listItem","name":"AWS"}},{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/category\/aws\/#listItem","position":2,"name":"AWS","item":"https:\/\/www.supportpro.com\/blog\/category\/aws\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/#listItem","name":"CVE-2026-110248: SageMaker SDK Security Fix"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/#listItem","position":3,"name":"CVE-2026-110248: SageMaker SDK Security Fix","previousItem":{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/category\/aws\/#listItem","name":"AWS"}}]},{"@type":"Organization","@id":"https:\/\/www.supportpro.com\/blog\/#organization","name":"SupportPRO","description":"SupportPRO Blog","url":"https:\/\/www.supportpro.com\/blog\/","telephone":"+18476076123"},{"@type":"Person","@id":"https:\/\/www.supportpro.com\/blog\/author\/tanisha-marmiasystems-com\/#author","url":"https:\/\/www.supportpro.com\/blog\/author\/tanisha-marmiasystems-com\/","name":"Tanisha Mathew","image":{"@type":"ImageObject","@id":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/3a44dca8e0888dffd34573aa37d9bef5d6dfd090d786986af5e061eda54bec5f?s=96&d=mm&r=g","width":96,"height":96,"caption":"Tanisha Mathew"}},{"@type":"WebPage","@id":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/#webpage","url":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/","name":"CVE-2026-110248: Fix SageMaker SDK Vulnerability","description":"Learn how to fix CVE-2026-110248, update affected SageMaker Python SDK versions, check CloudWatch Logs, and protect exposed Git credentials.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.supportpro.com\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/#breadcrumblist"},"author":{"@id":"https:\/\/www.supportpro.com\/blog\/author\/tanisha-marmiasystems-com\/#author"},"creator":{"@id":"https:\/\/www.supportpro.com\/blog\/author\/tanisha-marmiasystems-com\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SageMaker-credential-exposure-blog-banner.png","@id":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/#mainImage","width":1920,"height":960,"caption":"CVE-2026-110248: Fix SageMaker SDK Credential Exposure and Check CloudWatch Logs"},"primaryImageOfPage":{"@id":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/#mainImage"},"datePublished":"2026-10-15T23:09:30-06:00","dateModified":"2026-10-15T23:09:34-06:00"},{"@type":"WebSite","@id":"https:\/\/www.supportpro.com\/blog\/#website","url":"https:\/\/www.supportpro.com\/blog\/","name":"Server Management Tips","description":"SupportPRO Blog","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.supportpro.com\/blog\/#organization"}}]},"og:locale":"en_US","og:site_name":"Server Management Tips | SupportPRO Blog","og:type":"article","og:title":"CVE-2026-110248: Fix SageMaker SDK Vulnerability","og:description":"Learn how to fix CVE-2026-110248, update affected SageMaker Python SDK versions, check CloudWatch Logs, and protect exposed Git credentials.","og:url":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/","og:image":"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SageMaker-credential-exposure-blog-banner.png","og:image:secure_url":"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SageMaker-credential-exposure-blog-banner.png","og:image:width":1920,"og:image:height":960,"article:published_time":"2026-10-16T05:09:30+00:00","article:modified_time":"2026-10-16T05:09:34+00:00","twitter:card":"summary","twitter:title":"CVE-2026-110248: Fix SageMaker SDK Vulnerability","twitter:description":"Learn how to fix CVE-2026-110248, update affected SageMaker Python SDK versions, check CloudWatch Logs, and protect exposed Git credentials.","twitter:image":"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2026\/10\/SageMaker-credential-exposure-blog-banner.png"},"aioseo_meta_data":{"post_id":"18225","title":"CVE-2026-110248: Fix SageMaker SDK Vulnerability","description":"Learn how to fix CVE-2026-110248, update affected SageMaker Python SDK versions, check CloudWatch Logs, and protect exposed Git credentials.","keywords":null,"keyphrases":{"focus":{"keyphrase":"CVE-2026-110248","score":0,"analysis":[]},"additional":[{"keyphrase":"SageMaker Python SDK vulnerability","score":0},{"keyphrase":"AWS SageMaker security vulnerability,","score":0},{"keyphrase":"SageMaker SDK security update","score":0},{"keyphrase":"Git credentials exposure","score":0},{"keyphrase":"CloudWatch Logs security","score":0}]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-10-16 05:10:57","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":null,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-10-15 12:45:49","updated":"2026-10-16 05:10:57","focus_keyword":"CVE-2026-110248","additional_keywords":[{"word":"SageMaker Python SDK vulnerability","score":80,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":9}}},{"word":"AWS SageMaker security vulnerability,","score":74,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":6}}},{"word":"SageMaker SDK security update","score":80,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":9}}},{"word":"Git credentials exposure","score":74,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":6}}},{"word":"CloudWatch Logs security","score":74,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":6}}}],"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.supportpro.com\/blog\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.supportpro.com\/blog\/category\/aws\/\" title=\"AWS\">AWS<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tCVE-2026-110248: SageMaker SDK Security Fix\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.supportpro.com\/blog\/"},{"label":"AWS","link":"https:\/\/www.supportpro.com\/blog\/category\/aws\/"},{"label":"CVE-2026-110248: SageMaker SDK Security Fix","link":"https:\/\/www.supportpro.com\/blog\/cve-2026-110248-sagemaker-sdk-security-fix\/"}],"_links":{"self":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/18225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/comments?post=18225"}],"version-history":[{"count":3,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/18225\/revisions"}],"predecessor-version":[{"id":18233,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/18225\/revisions\/18233"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/media\/18226"}],"wp:attachment":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/media?parent=18225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/categories?post=18225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/tags?post=18225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}