CVE-2026-124035 · Package
NO FIX YET · SEE WHAT TO DO
The Amazon Braket Schemas library, used by the Braket SDK to parse quantum task results, can be made to execute arbitrary code by a crafted task result document written to S3. A separate flaw in the SDK's hybrid job input download lets an authenticated user with S3 write access overwrite arbitrary files as the job's user.
first public Nov 9, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams that run the Braket SDK to submit quantum tasks and hybrid jobs, or that retrieve task results with the Braket Schemas library. The code-execution path needs an authenticated user who can write to the quantum task output location; the file-overwrite path needs write access to a hybrid job's input data location. Teams with no Braket usage or with S3 write access restricted to trusted principals are lower risk.
Not affected if no-braket-usage, s3-write-restricted
Who cares amazon-braket, aws, lab-disclosure, python, quantum
amazon-braket-schemas version; affected versions are >= 1.17.0 and < 1.32.2.amazon-braket-sdk version; affected versions are >= 1.10.0 and < 1.127.7.CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK
Bulletin ID: 2026-175-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/09/2026 14:15 PM PST
Description:
Amazon Braket SDK is an open source Python library that customers use to run quantum tasks and hybrid jobs on Amazon Braket and retrieve their results, and it uses the Amazon Braket Schemas library to parse task results.
We identified CVE-2026-124034, an issue in the local hybrid job input data download in the Amazon Braket SDK. A remote authenticated user with S3 write access to a hybrid job's input data location might be able to overwrite arbitrary files, with the privileges of the user running the job, by supplying crafted S3 object keys.
We identified CVE-2026-124035, an issue in the error mitigation schema validation in Amazon Braket Schemas, the library the Amazon Braket SDK uses to parse quantum task results. A remote authenticated user with S3 write access to the quantum task output location might be able to execute arbitrary code on any machine that retrieves the quantum task results by supplying a crafted task result document. Please note, this is a follow-on fix to the prior advisory CVE-2026-9291.
Impacted versions:
Resolution:
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
amazon-braket-schemas: 1.32.2amazon-braket-sdk: 1.127.7Workarounds:
Restrict S3 write access to the Braket task-output and local-job input data locations (and the job's IAM role) to trusted principals.
References:
Acknowledgement:
We would like to thank Eva Crystal (0xiviel), XSource Security for collaborating on this issue through the coordinated issue disclosure process.
Please email aws-security@amazon.com with any s ecurity questions or concerns.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.