{"id":"CVE-2026-100308","title":"Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a craf…","summary":"Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a craf…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-470","CWE-502"],"vendor":"AWS","product":"gluonts","affected":["gluonts < 0.17.0"],"published":"2026-09-29","updated":"2026-09-30","sourceUpdated":"2026-09-30T16:16:59.993","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-100308","references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-119-aws/","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5"},{"url":"https://github.com/awslabs/gluonts/releases/tag/v0.17.0","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5"},{"url":"https://github.com/awslabs/gluonts/security/advisories/GHSA-64q6-5qv7-cwj9","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100308.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-100308"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543240"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-100308"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100308"},{"url":"https://access.redhat.com/errata/RHSA-2026:84734"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00136,"epssPercentile":0.02989,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-30T15:21:05.992113Z"},"ingestedAt":"2026-09-29T16:39:33.262Z","patched":["openshift_ai 3.4"],"slug":"CVE-2026-100308","body":"## Overview\n\nDeserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory.\n\n\n\nTo remediate this issue, users should upgrade to version 0.17.0 or later.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat OpenShift AI (RHOAI) · updated 2026-10-19 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100308.json)\n- **RHSA-2026:84734** · Red Hat · fixed in: Red Hat OpenShift AI 3.4 · released 2026-10-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:84734)","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}