CVE-2026-124035

7.1 HIGHpublic exploit available

Published 2026-11-09 · Updated 2026-11-09

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Unsafe reflection in the error mitigation schema validation in Amazon Braket Schemas before 1.32.2 might allow a remote authenticated user with S3 write access to the quantum task output location to execute arbitrary code on any machine that retrieves the quantum task results via a crafted task result document. We recommend you upgrade to amazon-braket-schemas version 1.32.2 or later.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-470

Public exploit & PoC references

https://github.com/amazon-braket/amazon-braket-schemas-python/releases/tag/v1.32.2
https://github.com/amazon-braket/amazon-braket-schemas-python/security/advisories/GHSA-9r5x-g8jm-9mjj

All references

https://aws.amazon.com/security/security-bulletins/2026-175-aws/
https://github.com/amazon-braket/amazon-braket-schemas-python/releases/tag/v1.32.2
https://github.com/amazon-braket/amazon-braket-schemas-python/security/advisories/GHSA-9r5x-g8jm-9mjj

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2017-20285PoC
HIGHCVE-2026-100308PoC
HIGHCVE-2026-101292
HIGHCVE-2026-102094PoC
LOWCVE-2026-102580
HIGHCVE-2026-104629PoC
MEDIUMCVE-2026-105064
HIGHCVE-2026-105782PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.