CVE-2026-1778: Aws Sagemaker Python SDK

Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succeed.

Affected products

• Aws Sagemaker Python SDK

Published 2026-02-02. Last modified 2026-06-17.