Amazon SageMaker Python SDK Vulnerability Requires Immediate Update

Amazon SageMaker Python SDK has a critical flaw (CVE-2026-112408) in the default_bucket() function that skips ownership verification. An attacker could pre-create the predictably named S3 bucket and gain code execution plus IAM credentials in your SageMaker environment. Update immediately: SDK V2 to 2.257.3+ or V3 to 3.10.0+. User action required.