Amazon SageMaker Python SDK: Git Credentials Leaked to CloudWatch Logs
Amazon SageMaker Python SDK has a nasty bug (CVE-2026-110248) where failed Git clone operations expose repository credentials in plain text to CloudWatch Logs. If you're running SDK V2 before 2.257.3 or V3 before 3.10.0, update immediately—anyone with log access can grab your credentials. This one requires action.
source: [aws/security-bulletin]