CVE WATCH / VULNERABILITY DETAIL
CVE-2026-100308
HIGHCVSS 7.8NVD feed
Published 29 September 2026 · tracked since 30 September 2026
Description
Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory. To remediate this issue, use
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog