https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 21:34:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-320162 EUVD-2026-320162 https://cve.radiocsirt.org/vuln/euvd-2026-320162 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9291 <p>Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results.</p> <p>We recommend you upgrade to amazon-braket-sdk version 1.117.0 or later.</p> <p>Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results.</p> <p>We recommend you upgrade to amazon-braket-sdk version 1.117.0 or later.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9291 https://cve.radiocsirt.org/vuln/ghsa-g697-2xrc-gc46 <p><strong>Affected:</strong> PyPI: amazon-braket-sdk</p> <p>**Summary** Amazon Braket SDK is an open-source Python library for interacting with the Amazon Braket quantum computing service, including managing hybrid quantum jobs and retrieving job results. An issue exists where, under certain circumstances, a remote authenticated user with S3 write access to a Braket job output bucket can achieve arbitrary code execution by exploiting insecure deserialization in the job results processing component.</p> <p>**Impact** The SDK&#39;s deserialize_values() function reads the dataFormat field directly from the job results JSON file without validation. An actor with write access to the victim&#39;s S3 job output bucket can modify the dataFormat field in results.json from PLAINTEXT to pickled_v4 and replace dataDictionary values with base64-encoded executable payloads. When the victim calls job.result(), load_job_result(), or load_job_checkpoint() as part of their normal Braket workflow, the SDK calls pickle.loads() on the actor-controlled data, executing arbitrary code with the victim&#39;s permissions.</p> <p>**Impacted versions**: &gt;= v1.10.0 AND &lt; 1.117.0</p> <p>**Patches** This issue has been addressed in amazon-braket-sdk version 1.117.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>**Workarounds** If users cannot upgrade immediately:</p> <p>1. Restrict S3 bucket policies on the Braket job output buckets to enforce least-privilege access, ensuring only trusted principals have s3:PutObject…</p> <p><strong>Affected:</strong> PyPI: amazon-braket-sdk</p> <p>**Summary** Amazon Braket SDK is an open-source Python library for interacting with the Amazon Braket quantum computing service, including managing hybrid quantum jobs and retrieving job results. An issue exists where, under certain circumstances, a remote authenticated user with S3 write access to a Braket job output bucket can achieve arbitrary code execution by exploiting insecure deserialization in the job results processing component.</p> <p>**Impact** The SDK&#39;s deserialize_values() function reads the dataFormat field directly from the job results JSON file without validation. An actor with write access to the victim&#39;s S3 job output bucket can modify the dataFormat field in results.json from PLAINTEXT to pickled_v4 and replace dataDictionary values with base64-encoded executable payloads. When the victim calls job.result(), load_job_result(), or load_job_checkpoint() as part of their normal Braket workflow, the SDK calls pickle.loads() on the actor-controlled data, executing arbitrary code with the victim&#39;s permissions.</p> <p>**Impacted versions**: &gt;= v1.10.0 AND &lt; 1.117.0</p> <p>**Patches** This issue has been addressed in amazon-braket-sdk version 1.117.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>**Workarounds** If users cannot upgrade immediately:</p> <p>1. Restrict S3 bucket policies on the Braket job output buckets to enforce least-privilege access, ensuring only trusted principals have s3:PutObject…</p> https://cve.radiocsirt.org/vuln/ghsa-g697-2xrc-gc46 https://cve.radiocsirt.org/vuln/pysec-2026-2342 <p><strong>Affected:</strong> PyPI: amazon-braket-sdk</p> <p>**Summary** Amazon Braket SDK is an open-source Python library for interacting with the Amazon Braket quantum computing service, including managing hybrid quantum jobs and retrieving job results. An issue exists where, under certain circumstances, a remote authenticated user with S3 write access to a Braket job output bucket can achieve arbitrary code execution by exploiting insecure deserialization in the job results processing component.</p> <p>**Impact** The SDK&#39;s deserialize_values() function reads the dataFormat field directly from the job results JSON file without validation. An actor with write access to the victim&#39;s S3 job output bucket can modify the dataFormat field in results.json from PLAINTEXT to pickled_v4 and replace dataDictionary values with base64-encoded executable payloads. When the victim calls job.result(), load_job_result(), or load_job_checkpoint() as part of their normal Braket workflow, the SDK calls pickle.loads() on the actor-controlled data, executing arbitrary code with the victim&#39;s permissions.</p> <p>**Impacted versions**: &gt;= v1.10.0 AND &lt; 1.117.0</p> <p>**Patches** This issue has been addressed in amazon-braket-sdk version 1.117.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>**Workarounds** If users cannot upgrade immediately:</p> <p>1. Restrict S3 bucket policies on the Braket job output buckets to enforce least-privilege access, ensuring only trusted principals have s3:PutObject…</p> <p><strong>Affected:</strong> PyPI: amazon-braket-sdk</p> <p>**Summary** Amazon Braket SDK is an open-source Python library for interacting with the Amazon Braket quantum computing service, including managing hybrid quantum jobs and retrieving job results. An issue exists where, under certain circumstances, a remote authenticated user with S3 write access to a Braket job output bucket can achieve arbitrary code execution by exploiting insecure deserialization in the job results processing component.</p> <p>**Impact** The SDK&#39;s deserialize_values() function reads the dataFormat field directly from the job results JSON file without validation. An actor with write access to the victim&#39;s S3 job output bucket can modify the dataFormat field in results.json from PLAINTEXT to pickled_v4 and replace dataDictionary values with base64-encoded executable payloads. When the victim calls job.result(), load_job_result(), or load_job_checkpoint() as part of their normal Braket workflow, the SDK calls pickle.loads() on the actor-controlled data, executing arbitrary code with the victim&#39;s permissions.</p> <p>**Impacted versions**: &gt;= v1.10.0 AND &lt; 1.117.0</p> <p>**Patches** This issue has been addressed in amazon-braket-sdk version 1.117.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>**Workarounds** If users cannot upgrade immediately:</p> <p>1. Restrict S3 bucket policies on the Braket job output buckets to enforce least-privilege access, ensuring only trusted principals have s3:PutObject…</p> https://cve.radiocsirt.org/vuln/pysec-2026-2342