8.2

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-1778

CVE-2026-1778: TLS disabled by default in select aws/sagemaker-python-sdk configurations

Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succeed.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-1778

CVE-2026-1778:

8.2

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
sagemaker	pip	>= 3.0, < 3.1.1	3.1.1
sagemaker	pip	< 2.256.0	2.256.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is caused by the global disabling of SSL certificate verification in the Triton Python backend of the SageMaker Python SDK. The patch removes the line ssl._create_default_https_context = ssl._create_unverified_context from the sagemaker.serve.model_server.triton.model module. This line is executed when the module is imported, and it affects the entire Python process. Therefore, the vulnerability is not contained within a single function but is at the module level. Any function that triggers the import of this module and subsequently makes an HTTPS request is affected. The provided vulnerable_functions entry points to the module itself as it is the source of the vulnerability. During runtime, a profiler might show functions like ModelBuilder.build (mentioned in the pull request) which would lead to the import of the vulnerable module, followed by a function performing a download. However, the most precise location of the vulnerability is the module itself.

Vulnerable functions

sagemaker.serve.model_server.triton.model

src/sagemaker/serve/model_server/triton/model.py

The vulnerability is not in a specific function but at the module level. When the `sagemaker.serve.model_server.triton.model` module is imported, it globally disables SSL certificate verification by setting `ssl._create_default_https_context` to `ssl._create_unverified_context`. This insecure configuration affects any subsequent HTTPS request made by the application, making it vulnerable to Man-in-the-Middle (MITM) attacks. An attacker could intercept the connection and inject malicious code or models. While not a function, the import of this module is the root cause of the vulnerability.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.