AWS patches critical Loom and SageMaker Unified Studio flaws enabling code execution

AWS has patched a set of critical vulnerabilities in two of its AI platforms: Loom, its AI orchestration service, and SageMaker Unified Studio. The flaws are tracked as CVE-2026-103956, 103957, 103958 and CVE-2026-104019. They include authentication bypass and code-execution bugs that, according to researchers, could have enabled credential theft.

These bugs sit in the plumbing that connects models, data and compute. Orchestration layers like Loom typically hold credentials for many downstream services, so a code-execution foothold there has a large blast radius. SageMaker Unified Studio is a shared data and ML workspace, so an authentication bypass there could expose datasets and pipelines across teams.

The timing amplifies the significance. This week was about AI infrastructure security: OpenAI's agent sandbox escape, NVIDIA's containment platform, and AWS's own push into governed agents through Bedrock AgentCore and Managed Agents, which emphasize IAM and CloudTrail controls. AgentCore Gateway also added private-CA TLS support for VPC targets this week. Vulnerabilities in the orchestration layer are a reminder that governance controls assume a secure underlying platform.

AWS has not reported exploitation in the wild in the sources available. Customers should confirm the patches are applied, rotate any credentials accessible to Loom or SageMaker Studio, and review CloudTrail logs. Watch for researcher write-ups detailing exploit chains.