CVE-2026-100308 - GluonTS arbitrary command execution during model deserialization

Published 2026-09-29T15:17:30Z•8e9c5ef28183ad8b98887e688d579c3e1cb3c385ef4a5e5a7da6227d2782c32e

Source metadata

Publication date
2026-09-29T15:17:30Z
Source identifier
f094c55b66f0cb726ab4b0c1cc2a29cd7dccc421
Public record ID
record:sha256:8e9c5ef28183ad8b98887e688d579c3e1cb3c385ef4a5e5a7da6227d2782c32e

This is source-provided metadata, not an enriched summary or an impact assessment. Follow the canonical source link for the published material.

Evidence and limitations

Source ID
aws_security_bulletins
Record identifier
8e9c5ef28183ad8b98887e688d579c3e1cb3c385ef4a5e5a7da6227d2782c32e
Record type
Source metadata

This record may overlap with other records. Source metadata can be incomplete or change. Validate consequential decisions against the linked source and your own environment.