Gluonts
Monthly
Deserialization of untrusted data in the GluonTS model-loading component allows arbitrary OS command execution with the privileges of the loading process when a victim loads a crafted serialized model directory in versions before 0.17.0. The flaw is scored 8.4 under CVSS 4.0 (assessed as CVSS 3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), meaning no authentication is required but exploitation is local and depends on a user actively loading the malicious model artifact; the attacker must first place that artifact in the victim's load path (untrusted model hub, shared directory, or compromised pipeline), and environments that only load self-generated trusted models are not affected. AWS has released a fix in GluonTS 0.17.0 (upstream PR #3304, '[Security] Resolve security issue for torch.load'), and no public exploit code and no confirmed active exploitation were identified at time of analysis; EPSS data was not provided for this CVE.
Deserialization of untrusted data in the GluonTS model-loading component allows arbitrary OS command execution with the privileges of the loading process when a victim loads a crafted serialized model directory in versions before 0.17.0. The flaw is scored 8.4 under CVSS 4.0 (assessed as CVSS 3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), meaning no authentication is required but exploitation is local and depends on a user actively loading the malicious model artifact; the attacker must first place that artifact in the victim's load path (untrusted model hub, shared directory, or compromised pipeline), and environments that only load self-generated trusted models are not affected. AWS has released a fix in GluonTS 0.17.0 (upstream PR #3304, '[Security] Resolve security issue for torch.load'), and no public exploit code and no confirmed active exploitation were identified at time of analysis; EPSS data was not provided for this CVE.