CVE-2026-104019 - OS command injection in the Studio Space startup script in Amazon SageMaker Distribution

Published 2026-10-02T20:25:48Z•7cb6d369102915c447102232f5b2391f2fc839adb64c7ab24e6625ed60c004c8

Source metadata

Publication date
2026-10-02T20:25:48Z
Source identifier
994f50277f499e61c223462dc874510bfeef240d
Public record ID
record:sha256:7cb6d369102915c447102232f5b2391f2fc839adb64c7ab24e6625ed60c004c8

This is source-provided metadata, not an enriched summary or an impact assessment. Follow the canonical source link for the published material.

Evidence and limitations

Source ID
aws_security_bulletins
Record identifier
7cb6d369102915c447102232f5b2391f2fc839adb64c7ab24e6625ed60c004c8
Record type
Source metadata

This record may overlap with other records. Source metadata can be incomplete or change. Validate consequential decisions against the linked source and your own environment.