CVE-2026-1778 — TLS disabled by default in select aws/sagemaker-python-sdk configurations
Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, inc…
Published: 2026-02-02 · CVSS: 8.2 · CVSS 4.0
Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succeed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7