---
id: "CVE-2026-124035"
page: "https://infrastack.ai/live/CVE-2026-124035"
kind: "vulnerability"
aliases: ["CVE-2026-124035"]
title: "Unsafe reflection in the error mitigation schema validation in Amazon Braket Schemas before 1.32.2 might allow a\u2026"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["amazon-braket", "aws", "lab-disclosure", "package", "python", "quantum"]
not_affected_if: ["no-braket-usage", "s3-write-restricted"]
published_at: "2026-11-09T23:17:18+00:00"
first_seen_at: "2026-11-09T23:46:36+00:00"
updated_at: "2026-11-10T00:28:47+00:00"
sources: [{"source": "lab", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-175-aws/", "first_seen_at": "2026-11-09T23:46:36+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124035", "first_seen_at": "2026-11-10T00:28:47+00:00"}]
exploit_sources: []
---

# Unsafe reflection in the error mitigation schema validation in Amazon Braket Schemas before 1.32.2 might allow a…

Link for people: https://infrastack.ai/live/CVE-2026-124035 (this .md is for agents)

The Amazon Braket Schemas library, used by the Braket SDK to parse quantum task results, can be made to execute arbitrary code by a crafted task result document written to S3. A separate flaw in the SDK's hybrid job input download lets an authenticated user with S3 write access overwrite arbitrary files as the job's user.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed `amazon-braket-schemas` version; affected versions are `>= 1.17.0` and `< 1.32.2`.
- Check the installed `amazon-braket-sdk` version; affected versions are `>= 1.10.0` and `< 1.127.7`.
- Review who has S3 write access to Braket task-output and hybrid job input locations and the job's IAM role.

## Fix

- `amazon-braket-schemas`: `1.32.2`
- `amazon-braket-sdk`: `1.127.7`

## Timeline

- 2026-11-09T23:46:36+00:00 lab https://aws.amazon.com/security/security-bulletins/rss/2026-175-aws/ — AWS: CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK
- 2026-11-10T00:28:47+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124035

## Documents

- [advisory] Vendor advisory: github.com https://github.com/amazon-braket/amazon-braket-schemas-python/security/advisories/GHSA-9r5x-g8jm-9mjj
- [fix] Release notes: github.com https://github.com/amazon-braket/amazon-braket-schemas-python/releases/tag/v1.32.2
- [mentions] AWS: CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK https://aws.amazon.com/security/security-bulletins/rss/2026-175-aws/

## From the sources

CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK

### CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK

Bulletin ID: 2026-175-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/09/2026 14:15 PM PST

 Description:

Amazon Braket SDK is an open source Python library that customers use to run quantum tasks and hybrid jobs on Amazon Braket and retrieve their results, and it uses the Amazon Braket Schemas library to parse task results.

We identified CVE-2026-124034, an issue in the local hybrid job input data download in the Amazon Braket SDK. A remote authenticated user with S3 write access to a hybrid job's input data location might be able to overwrite arbitrary files, with the privileges of the user running the job, by supplying crafted S3 object keys.

We identified CVE-2026-124035, an issue in the error mitigation schema validation in Amazon Braket Schemas, the library the Amazon Braket SDK uses to parse quantum task results. A remote authenticated user with S3 write access to the quantum task output location might be able to execute arbitrary code on any machine that retrieves the quantum task results by supplying a crafted task result document. Please note, this is a follow-on fix to the prior advisory CVE-2026-9291.

Impacted versions:

- CVE-2026-124034: amazon-braket-sdk >= 1.10.0 AND < 1.127.7
- CVE-2026-124035: amazon-braket-schemas >= 1.17.0 AND < 1.32.2

Resolution:

- CVE-2026-124034: This issue has been addressed in Amazon Braket SDK version 1.127.7. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.
- CVE-2026-124035: This issue has been addressed in Amazon Braket Schemas version 1.32.2. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.

Workarounds:

Restrict S3 write access to the Braket task-output and local-job input data locations (and the job's IAM role) to trusted principals.

References:

- CVE-2026-124034
- CVE-2026-124035
- GHSA-4hhf-mfx9-3877
- GHSA-9r5x-g8jm-9mjj

Acknowledgement:

We would like to thank Eva Crystal (0xiviel), XSource Security for collaborating on this issue through the coordinated issue disclosure process.

 Please email aws-security@amazon.com with any s ecurity questions or concerns.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_