AVID-2026-R1646

Description

MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk (CVE-2025-0508)

Details

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This issue can cause integrity problems within the pipeline, potentially leading to erroneous processing outcomes.

Reason for inclusion in AVID: The CVE describes an MD5 hash collision vulnerability in the SageMaker Workflow component of the aws/sagemaker-python-sdk, which can cause integrity issues in ML pipelines. This directly concerns AI software tooling and workflows used to build/deploy general-purpose AI systems, representing a software supply chain risk in AI stacks (dependencies, runtimes, model serving/workflow orchestration). The vulnerability is security-related (integrity risk) and is supported by CVE details and references, providing sufficient evidence for classification.

References

Affected or Relevant Artifacts

Developer: aws
Deployer: aws
Artifact Details:

Type	Name
System	aws/sagemaker-python-sdk

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.0
Vector String	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score	5.9
Base Severity	🟠 Medium
Attack Vector	NETWORK
Attack Complexity	🔴 High
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	🔴 High
Availability Impact	NONE

CWE

ID	Description
CWE-328	CWE-328 Reversible One-Way Hash

Other information

Report Type: Advisory
Credits:
Date Reported: 2025-03-20
Version: 0.3.3
AVID Entry