Package vulnerability, severity high
Amazon Braket SDK and Schemas flaws allow file overwrite and code execution (CVE-2026-124034, CVE-2026-124035)
Published
CVE-2026-124034 in the Amazon Braket SDK lets a remote authenticated user with S3 write access to a hybrid job's input location overwrite arbitrary files via crafted S3 object keys. CVE-2026-124035 in Amazon Braket Schemas lets a user with S3 write access to the task output location execute arbitrary code on any machine that retrieves the task results. The second is a follow-on fix to the earlier advisory CVE-2026-9291.
What's affected
- amazon-braket-sdk (pypi)>=1.10.0 <1.127.7
- amazon-braket-schemas (pypi)>=1.17.0 <1.32.2
What to do
- Upgrade amazon-braket-sdk to 1.127.7 or later
- Upgrade amazon-braket-schemas to 1.32.2 or later
- Make sure any forked or derivative code incorporates the fixes
- Restrict S3 write access to Braket task-output and local-job input data locations, and the job's IAM role, to trusted principals
Check whether you were affected
Pharon tells teams automatically when this affects something they run. To check a machine, run this in Claude Code with the Pharon plugin, in the repository that uses it:
/pharon:check-incident amazon-braket-sdk-file-overwrite-rce-2026-11References
Notice amazon-braket-sdk-file-overwrite-rce-2026-11, signed with key feed-prod-2026-10 (Ed25519). The Pharon CLI verifies the signature before using a notice.