CVE-2026-119083

Vendor

AWS

Product

gluonts

CVSS v3.1

7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness

CWE-22

Exposure class

Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   AWS bulletin AWS 7h ago

   CVE-2026-119083 - GluonTS arbitrary file write during archive extraction

   Bulletin ID: 2026-171-AWS Publication Date: 11/05/2026 08:30 AM PST Description: GluonTS is an open-source Python library for probabilistic time series modeling. We identified CVE-2026-119083, an issue in the archive extraction…

   CVE-2026-119083 Amazon Web Services
2. 30
   CVE NVD 6h ago

   Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplies a crafted tar archive to write arbitrary…

   Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplies a crafted tar archive to write arbitrary files outside the intended extraction directory with the privileges of the…

   CVSS 7.8 Fix available CVE-2026-119083 AWS