CVE-2025-0508: SageMaker Package MD5 Hash Collision Vulnerability
Summary
CVE-2025-0508: SageMaker Workflow component allows possibility of MD5 hash collisions. Affects sagemaker versions < 2.237.3. Fixed in 2.237.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The SageMaker package, part of the AWS ecosystem, is a Python SDK that facilitates the development, training, and deployment of machine learning models. It provides a suite of tools to streamline workflows, manage data, and integrate with various AWS services. However, it is susceptible to a vulnerability that allows for MD5 hash collisions, potentially compromising the integrity of machine learning workflows.
Vulnerability Detail
A vulnerability in the SageMaker Workflow component of the aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This issue arises from the inherent weaknesses in the MD5 hashing algorithm, which can lead to different configurations producing the same hash value. As a result, workflows may be inadvertently replaced due to the reuse of results from these configurations, leading to integrity problems within the pipeline and potentially erroneous processing outcomes.
How To Fix
Latest published version: 3.27.0 as of 22 Oct 2026
pip install --upgrade "sagemaker==3.27.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2.237.3
This is the first release that contains the fix.
pip install --upgrade "sagemaker==2.237.3"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider using a different hashing algorithm for your workflows, if feasible, to avoid the risks associated with MD5 hash collisions. However, this may require additional implementation effort and is not a substitute for updating the package.
Conclusion
The SageMaker package has a vulnerability related to MD5 hash collisions that can compromise the integrity of machine learning workflows. It is crucial to update to the patched version 2.237.3 to mitigate this risk. Users are encouraged to monitor their applications for vulnerabilities using tools like Vulert.
See every vulnerability recorded for sagemaker →
FAQ
The vulnerability allows for MD5 hash collisions, which can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors and alerts for open-source vulnerabilities without requiring any signup.
The consequences include integrity problems within the pipeline, which may lead to erroneous processing outcomes and unreliable machine learning model performance.
Yes, a patch is available in version 2.237.3 of the SageMaker package. Updating to this version will mitigate the vulnerability.
The CVSS score of this vulnerability is 5.9, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for sagemaker.
