{"uuid": "73596093-e102-4c19-a260-59d6f8e62d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104019", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117375449585257075", "content": "CVE-2026-104019: CRITICAL OS command injection in AWS SageMaker Distribution (CVSS 9.0) can let project contributors run arbitrary code & steal credentials. Upgrade to fixed versions or restart supported Spaces for auto-patch. https://radar.offseq.com/threat/cve-2026-104019-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-977760a40717075a #OffSeq #AWS #CVE #CloudSec", "creation_timestamp": "2026-10-03T06:00:27.461256Z"}