CVE-2026-124035 | BDVDB-2026-402391 Detail
Amazonamazon-braket-schemas
Description#
Unsafe reflection in the error mitigation schema validation in Amazon Braket Schemas before 1.32.2 might allow a remote authenticated user with S3 write access to the quantum task output location to execute arbitrary code on any machine that retrieves the quantum task results via a crafted task result document. We recommend you upgrade to amazon-braket-schemas version 1.32.2 or later.
Impact#
CAPEC-138 Reflection Injection
Weaknesses#
- CWE-470 Use of Externally-Controlled input to select classes or code ('unsafe reflection')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.