GluonTS arbitrary command execution during model deserialization
High7.8CVE-2026-100308 · Published Sep 29, 2026
Bulletin ID: 2026-119-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/29/2026 08:00 AM PDT Description: GluonTS is an open source library for deep learning based time series models. We identified CVE-2026-100308 that allows arbitrary command execution upon deserialization of untrusted model artifacts. Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory. The issue arises whenever a user calls Predictor.deserialize() or any RepresentablePredictor.deserialize() on a model directory they do not fully control. Impacted versions: <0.17.0 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin. View article
Affected versions
Changes since it was listed
| Date | Change |
|---|---|
| Oct 2 | Severity: Unrated to High |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity from
- NVD
More AWS advisories
All AWS| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Oct 1 | Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python) Medium5.3Oct 1 | Medium5.3 | No fix yet |
| Oct 1 | Uncontrolled recursion in the Ion reader in Amazon Ion PythonHigh7.5Oct 1 | High7.5 | No fix yet |
| Oct 1 | Argument injection in AWS security-agent-mcp-server diff scanHigh8.2Oct 1 | High8.2 | No fix yet |
| Oct 1 | Mount Option Injection in Amazon EFS CSI DriverMedium6.5Oct 1 | Medium6.5 | No fix yet |
| Sep 25 | REMOVE_BASE_PATH strips every leading repetition of the base path, not just oneLowSep 25 | Low | 1.1.0 |
| Sep 24 | Type confusion in AWS pgcollection allows remote code executionHigh8.8Sep 24 | High8.8 | No fix yet |