CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI
CVE-2026-124033
Summary
Bulletin ID: 2026-175-AWS
Publication Date: 11/09/2026 14:15 PM PST
Description:
Amazon Braket SDK is an open source Python library that customers use to run quantum tasks and hybrid jobs on Amazon Braket.
We identified CVE-2026-124034, an issue in the local hybrid job input data download in the Amazon Braket SDK. And we identified CVE-2026-124035, an issue in the error mitigation schema validation in Amazon Braket Schemas, the library the Amazon Braket SDK uses to parse quantum task results.
Impacted versions:
- amazon-braket-sdk >= 1.10.0 AND < 1.127.7
- amazon-braket-schemas >= 1.17.0 AND < 1.32.2
Refer to the article for the most up-to-date and complete information.
Read this article
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
And we identified CVE-2026-124035, an issue in the error mitigation schema validation in Amazon Braket Schemas, the library the Amazon Braket SDK uses to parse quantum task results.
CVEs in this advisory 2
Updates
- Published by AWS
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.