CVE Intelligence

AWS Gluonts vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting AWS Gluonts: 1 record(s), with affected versions and fixes.

CVE-2026-100308 High · 7.8 CWE-470 Sep 29, 2026
GluonTS arbitrary command execution during model deserialization
Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory. To remediate this issue, users should upgrade to version 0.17.0 or later.