CVE-2026-100308 - GluonTS arbitrary command execution during model deserialization
CVE-2026-100308 is a vulnerability in Amazon GluonTS, an open source library for deep learning based time series models, that allows arbitrary command execution during deserialization of untrusted model artifacts. Versions of GluonTS before 0.17.0 are affected. The vulnerability occurs when calling Predictor.deserialize() or RepresentablePredictor.deserialize() on a model directory that is not fully controlled by the user. This can lead to execution of arbitrary operating system commands with the privileges of the loading process. The issue has been fixed in version 0.17.0. Users are advised to upgrade to this version and only deserialize trusted model artifacts.
AI Analysis
Technical Summary
CVE-2026-100308 is an arbitrary command execution vulnerability in Amazon GluonTS before version 0.17.0. It arises from unsafe deserialization of untrusted model artifacts in the model loading component. Specifically, when Predictor.deserialize() or RepresentablePredictor.deserialize() is called on a crafted serialized model directory not fully controlled by the user, attackers can execute arbitrary OS commands with the privileges of the loading process. This vulnerability is resolved in GluonTS 0.17.0. Users should upgrade to this version and avoid deserializing untrusted model data.
Potential Impact
An attacker who can supply a crafted serialized model directory to the deserialization functions can execute arbitrary operating system commands with the privileges of the process performing the deserialization. This can lead to full compromise of the system or environment running the vulnerable GluonTS version if the attacker controls the model directory. The impact depends on the privilege level of the loading process.
Mitigation Recommendations
This vulnerability is fixed in GluonTS version 0.17.0. Users should upgrade to version 0.17.0 or later to remediate the issue. Additionally, users should only deserialize model artifacts from trusted sources to avoid exploitation. No other workarounds are recommended.
CVE-2026-100308 - GluonTS arbitrary command execution during model deserialization
Description
CVE-2026-100308 is a vulnerability in Amazon GluonTS, an open source library for deep learning based time series models, that allows arbitrary command execution during deserialization of untrusted model artifacts. Versions of GluonTS before 0.17.0 are affected. The vulnerability occurs when calling Predictor.deserialize() or RepresentablePredictor.deserialize() on a model directory that is not fully controlled by the user. This can lead to execution of arbitrary operating system commands with the privileges of the loading process. The issue has been fixed in version 0.17.0. Users are advised to upgrade to this version and only deserialize trusted model artifacts.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-100308 is an arbitrary command execution vulnerability in Amazon GluonTS before version 0.17.0. It arises from unsafe deserialization of untrusted model artifacts in the model loading component. Specifically, when Predictor.deserialize() or RepresentablePredictor.deserialize() is called on a crafted serialized model directory not fully controlled by the user, attackers can execute arbitrary OS commands with the privileges of the loading process. This vulnerability is resolved in GluonTS 0.17.0. Users should upgrade to this version and avoid deserializing untrusted model data.
Potential Impact
An attacker who can supply a crafted serialized model directory to the deserialization functions can execute arbitrary operating system commands with the privileges of the process performing the deserialization. This can lead to full compromise of the system or environment running the vulnerable GluonTS version if the attacker controls the model directory. The impact depends on the privilege level of the loading process.
Mitigation Recommendations
This vulnerability is fixed in GluonTS version 0.17.0. Users should upgrade to version 0.17.0 or later to remediate the issue. Additionally, users should only deserialize model artifacts from trusted sources to avoid exploitation. No other workarounds are recommended.
Technical Details
- Classification
- {"confidence":0.93,"severitySource":"heuristic","classifier":"rss-v2"}
- Article Source
- {"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-119-aws/","fetched":true,"fetchedAt":"2026-09-29T15:28:00.851Z","wordCount":194}
Threat ID: 6abbd900f7a7c541068f2997
Added to database: 09/29/2026, 15:28:00 UTC
Last enriched: 09/29/2026, 15:28:04 UTC
Last updated: 09/29/2026, 16:29:17 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.