CVE-2024-34072 Deserialization of Untrusted Data in sagemaker-python-sdk
An attacker can achieve remote code execution or denial of service by passing malicious pickled numpy object arrays to the NumpyDeserializer module.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-34072?
CVE-2024-34072 is a high-severity unsafe deserialization vulnerability in aws sagemaker-python-sdk, published on 3 May 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The sagemaker.base_deserializers.NumpyDeserializer module before v2.218.0 allows potentially unsafe deserialization when untrusted data is passed as pickled object arrays. This consequently may allow an unprivileged third party to cause remote code execution, denial of service, affecting both confidentiality and integrity. Users are advised to upgrade to version 2.218.0. Users unable to upgrade should not pass pickled numpy object arrays which originated from an untrusted source, or that could have been tampered with. Only pass pickled numpy object arrays from trusted sources.
Weakness: CWE-502
Which versions are affected by CVE-2024-34072?
3 open source packages ship an affected version, including sagemaker.
| Package | Affected | Fixed in |
|---|---|---|
sagemaker PyPI | All versions | 2.218.0 |
sagemaker PyPI | All versions | 2.218.0 |
sagemaker PyPI | All versions | 2.218.0 |
How do I fix CVE-2024-34072?
Upgrade sagemaker to 2.218.0 or later.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2024-34072 being exploited?
There is no known exploitation of CVE-2024-34072 in the wild and no public exploit code.
Sources
Also known as GHSA-wjvx-jhpj-r54r, PYSEC-2026-1889.