CVE-2026-100308: GluonTS arbitrary command execution during model deserialization
Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory.
To remediate this issue, users should upgrade to version 0.17.0 or later.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Amazon GluonTSto a version that resolves this vulnerability.Fixed in 0.17.0
Event History
Frequently Asked Questions
What must an attacker provide or influence to exploit this issue?
The attacker needs to cause the application to load a crafted serialized model directory. Exploitation occurs during model deserialization and can execute operating system commands with the privileges of the process performing the load.
Who is exposed to the highest risk?
Applications that load model directories from untrusted or attacker-influenced sources are exposed. The impact is determined by the permissions of the process that loads the model, because commands run with those same privileges.
What should be done if an immediate upgrade is not possible?
Do not deserialize model directories from untrusted or attacker-controlled sources. Restrict who can supply, modify, or select model directories loaded by the application until upgrading to version 0.17.0 or later.
Which versions contain the fix?
Upgrade Amazon GluonTS to version 0.17.0 or later. The issue affects versions before 0.17.0.