{"id":"CVE-2026-119083","kind":"vulnerability","aliases":["CVE-2026-119083"],"related":[],"title":"Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplies a…","description":"CVE-2026-119083 - GluonTS arbitrary file write during archive extraction\n\n### CVE-2026-119083 - GluonTS arbitrary file write during archive extraction\n\nBulletin ID: 2026-171-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/05/2026 08:30 AM PST\n\nDescription:\n\nGluonTS is an open-source Python library for probabilistic time series modeling.\n\nWe identified CVE-2026-119083, an issue in the archive extraction utility in GluonTS before 0.17.0. An actor who supplies a crafted tar archive containing symbolic or hard links might be able to write arbitrary files outside the intended extraction directory with the privileges of the extracting process.\n\nImpacted versions: < 0.17.0\n\nResolution:\n\nThis issue has been addressed in gluonts version 0.17.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.\n\nWorkarounds:\n\nIf you cannot upgrade immediately, do not use GluonTS to extract tar archives from untrusted or unverified sources. As defense in depth, running on Python 3.14 or later causes TarFile.extractall() to apply the data extraction filter by default, which blocks the link-based traversal described here. Upgrading to 0.17.0 remains the recommended remediation.\n\nReferences:\n\n- CVE-2026-119083\n- GHSA-rg2m-55pr-vp3q\n\nAcknowledgement:\n\nWe would like to thank Udit Jain for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","summary":"GluonTS, a Python library for time series modeling, fails to stop tar archives with symbolic or hard links from writing files outside the intended extraction directory. An attacker who supplies a crafted tar archive can overwrite arbitrary files with the privileges of the extracting process.","severity":"high","cvss":8.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aws","gluonts","lab-disclosure","ml-pipelines","package","python"],"not_affected_if":["gluonts-at-0.17.0-or-later","no-untrusted-archives"],"how_to_check":"- Check the installed GluonTS version with `pip show gluonts` and compare it to `0.17.0`.\n- Search your code for calls that extract tar archives through GluonTS from untrusted or unverified sources.\n- Check the Python version with `python --version`; on `3.14` or later, `TarFile.extractall()` applies the data extraction filter by default.","fix":"- `gluonts` `0.17.0`\n- Any forked or derivative GluonTS code should also be patched with the new fixes, per the AWS bulletin.","status":"open","published_at":"2026-11-05T17:17:55+00:00","first_seen_at":"2026-11-05T17:07:50+00:00","triaged_at":"2026-11-05T17:08:37+00:00","updated_at":"2026-11-05T17:40:03+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-05T17:08:37Z","model":"claude-haiku-5-5","output":{"fix":"- `gluonts` `0.17.0`\n- Any forked or derivative GluonTS code should also be patched with the new fixes, per the AWS bulletin.","reach":"unknown","title":"GluonTS: crafted tar archive writes files outside extraction directory","impact":"high","summary":"GluonTS, a Python library for time series modeling, fails to stop tar archives with symbolic or hard links from writing files outside the intended extraction directory. An attacker who supplies a crafted tar archive can overwrite arbitrary files with the privileges of the extracting process.","audience":"developers","category":"package","nicknames":[],"who_cares":["python","gluonts","ml-pipelines"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"Attacker overwrites arbitrary files with extracting process privileges","analyst_note":"","how_to_check":"- Check the installed GluonTS version with `pip show gluonts` and compare it to `0.17.0`.\n- Search your code for calls that extract tar archives through GluonTS from untrusted or unverified sources.\n- Check the Python version with `python --version`; on `3.14` or later, `TarFile.extractall()` applies the data extraction filter by default.","plain_action":"","needs_analyst":false,"not_affected_if":["no-untrusted-archives","gluonts-at-0.17.0-or-later"],"who_is_affected":"Teams that use the GluonTS Python library and extract tar archives through it, especially from sources they do not trust. Code that never extracts archives with GluonTS, or that only handles archives it created itself, is not exposed to this path. The bulletin does not give further detail on which GluonTS entry points reach the vulnerable extraction utility.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000791,"input_tokens":4722,"output_tokens":637,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-119083':20A,23A,81C,91C,136C,272C '-171':102C '-2026':19A,22A,80C,90C,135C,271C '0.17.0':11A,147C,182C,192C,264C '08':114C '11/05/2026':113C '2026':101C '3.14':240C '30':115C '55pr':276C 'abl':163C 'acknowledg':278C 'actor':15A,149C 'address':188C 'allow':13A 'appli':246C 'arbitrari':70B,83C,93C,166C 'archiv':5A,46B,67B,87C,97C,141C,155C,227C 'attack':61B 'attent':110C 'aw':24B,103C,105C 'aws-security@amazon.com':299C 'base':258C 'block':254C 'bulletin':99C 'cannot':217C 'caus':243C 'code':206C 'collabor':287C 'concern':305C 'contain':156C 'content':106C 'coordin':293C 'craft':65B,153C 'cve':18A,21A,79C,89C,134C,270C 'data':248C 'date':112C 'default':252C 'defens':234C 'depth':236C 'deriv':205C 'describ':260C 'descript':118C 'directori':59B,172C 'disclosur':28B,295C 'email':298C 'ensur':201C 'extract':6A,58B,77B,88C,98C,142C,171C,178C,225C,249C 'fail':42B 'file':54B,71B,84C,94C,167C 'filter':250C 'fix':213C 'fork':203C 'ghsa':274C 'ghsa-rg2m-55pr-vp3q':273C 'gluont':9A,25B,34B,82C,92C,119C,145C,190C,223C 'hard':50B,159C 'id':100C 'identifi':133C 'immedi':219C 'impact':180C 'import':108C 'incorpor':210C 'intend':57B,170C 'issu':138C,185C,290C 'jain':285C 'lab':27B 'lab-disclosur':26B 'later':242C 'latest':198C 'librari':37B,126C 'like':281C 'link':51B,160C,257C 'link-bas':256C 'might':12A,161C 'ml':30B 'ml-pipelin':29B 'model':41B,131C 'new':212C 'open':123C 'open-sourc':122C 'outsid':55B,168C 'overwrit':69B 'packag':32B 'patch':208C 'path':1A 'pipelin':31B 'pleas':297C 'privileg':74B,175C 'probabilist':128C 'process':78B,179C,296C 'pst':117C 'public':111C 'python':33B,36B,125C,239C 'question':303C 'recommend':194C,267C 'refer':269C 'remain':265C 'remedi':268C 'requir':109C 'resolut':183C 'rg2m':275C 'run':237C 'scope':104C 'secur':302C 'seri':40B,130C 'sourc':124C,232C 'stop':44B 'suppli':17A,63B,151C 'symbol':48B,157C 'tar':45B,66B,154C,226C 'tarfile.extractall':244C 'thank':283C 'time':39B,129C 'travers':2A,259C 'type':107C 'udit':284C 'untrust':229C 'unverifi':231C 'upgrad':195C,218C,262C 'use':222C 'util':7A,143C 'version':181C,191C,199C 'vp3q':277C 'vulner':294C 'workaround':214C 'would':280C 'write':53B,85C,95C,165C","nicknames":[],"mitigations":[],"who_affected":"Teams that use the GluonTS Python library and extract tar archives through it, especially from sources they do not trust. Code that never extracts archives with GluonTS, or that only handles archives it created itself, is not exposed to this path. The bulletin does not give further detail on which GluonTS entry points reach the vulnerable extraction utility.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aws","gluonts","high","labdisclosure","mlpipelines","package","python"],"campaign_type":null,"first_public_at":"2026-11-05T16:40:25+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"ff89ba41-3aa1-4d27-914a-91399e9639e5","poc_count":0,"sources":[{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/rss/2026-171-aws/#CVE-2026-119083","url":"https://aws.amazon.com/security/security-bulletins/rss/2026-171-aws/","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-05T17:07:50+00:00","fetched_at":"2026-11-05T17:07:50+00:00","note":"AWS: CVE-2026-119083 - GluonTS arbitrary file write during archive extraction"},{"source":"nvd","external_id":"CVE-2026-119083","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119083","severity":null,"published_at":"2026-11-05T17:17:55+00:00","modified_at":"2026-11-05T17:17:55+00:00","first_seen_at":"2026-11-05T17:40:03+00:00","fetched_at":"2026-11-05T17:40:05+00:00","note":null}],"documents":[{"id":77859,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-171-aws/","title":"AWS: CVE-2026-119083 - GluonTS arbitrary file write during archive extraction","kind":"advisory","source":"lab","publisher":"research","text":"CVE-2026-119083 - GluonTS arbitrary file write during archive extraction\n\n### CVE-2026-119083 - GluonTS arbitrary file write during archive extraction\n\nBulletin ID: 2026-171-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/05/2026 08:30 AM PST\n\nDescription:\n\nGluonTS is an open-source Python library for probabilistic time series modeling.\n\nWe identified CVE-2026-119083, an issue in the archive extraction utility in GluonTS before 0.17.0. An actor who supplies a crafted tar archive containing symbolic or hard links might be able to write arbitrary files outside the intended extraction directory with the privileges of the extracting process.\n\nImpacted versions: < 0.17.0\n\nResolution:\n\nThis issue has been addressed in gluonts version 0.17.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.\n\nWorkarounds:\n\nIf you cannot upgrade immediately, do not use GluonTS to extract tar archives from untrusted or unverified sources. As defense in depth, running on Python 3.14 or later causes TarFile.extractall() to apply the data extraction filter by default, which blocks the link-based traversal described here. Upgrading to 0.17.0 remains the recommended remediation.\n\nReferences:\n\n- CVE-2026-119083\n- GHSA-rg2m-55pr-vp3q\n\nAcknowledgement:\n\nWe would like to thank Udit Jain for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":43026,"url":"https://github.com/awslabs/gluonts/releases/tag/v0.17.0","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":78088,"url":"https://github.com/awslabs/gluonts/security/advisories/GHSA-rg2m-55pr-vp3q","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-11-05T16:40:25+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}