CVE-2026-124035 Unsafe reflection in Amazon Braket Schemas error mitigation validation
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-124035?
CVE-2026-124035 is a high-severity vulnerability in amazon-braket-schemas, published on 9 Nov 2026.
Official description
Unsafe reflection in the error mitigation schema validation in Amazon Braket Schemas before 1.32.2 might allow a remote authenticated user with S3 write access to the quantum task output location to execute arbitrary code on any machine that retrieves the quantum task results via a crafted task result document.
We recommend you upgrade to amazon-braket-schemas version 1.32.2 or later.
Weakness: CWE-470
Which versions are affected by CVE-2026-124035?
How do I fix CVE-2026-124035?
No fix has been published for CVE-2026-124035 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-124035 being exploited?
There is no known exploitation of CVE-2026-124035 in the wild and no public exploit code.
Sources
Also known as GHSA-9r5x-g8jm-9mjj.