AWS discloses multiple flaws across SageMaker, Redshift, RabbitMQ, Braket, and WorkSpaces

AWS published a series of security bulletins covering vulnerabilities across several products and SDKs, including model artifact integrity verification issues in the Amazon SageMaker Python SDK (CVE-2026-8596, CVE-2026-8597), a heap out-of-bounds read in coreMQTT MQTT5 property parsing (CVE-2026-8686), and a remote code execution flaw in the amazon-redshift-python-driver (CVE-2026-8838). The company also disclosed an arbitrary file read issue in the rabbitmq-aws plugin (CVE-2026-9133), tool execution without authorization via piped stdin in Kiro CLI (CVE-2026-9255), and insecure deserialization in Amazon Braket SDK job results processing (CVE-2026-9291).

A separate advisory addressed improper authentication token handling in the Amazon WorkSpaces client for Linux. Taken together, the disclosures span cloud development tools, messaging components, data platforms, quantum-computing SDKs, and end-user clients, indicating a broad patching requirement for organizations using AWS software. Security teams should identify affected packages and clients in their environments and prioritize remediation for flaws that could enable remote code execution, unauthorized actions, file disclosure, or unsafe processing of untrusted data.