7.1Yüksek

CVE-2026-124035Unsafe reflection in Amazon Braket Schemas error mitigation validation

Amazon amazon-braket-schemas Yayım: (2 gün önce)

Açıklama

Unsafe reflection in the error mitigation schema validation in Amazon Braket Schemas before 1.32.2 might allow a remote authenticated user with S3 write access to the quantum task output location to execute arbitrary code on any machine that retrieves the quantum task results via a crafted task result document. We recommend you upgrade to amazon-braket-schemas version 1.32.2 or later.

Zayıflık türü (CWE): CWE-470

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Amazon amazon-braket-schemas 1.17.0 – < 1.32.2

Kaynaklar ve yamalar