CVE-2026-119083
Description
A flaw was found in GluonTS. An attacker can achieve arbitrary file write by providing a specially crafted archive containing symbolic or hard links to the archive extraction utility. When unpacked, files can be written outside the intended destination directory with the privileges of the running process, potentially leading to unauthorized data modification or arbitrary code execution.
Statement
This vulnerability is rated as Important because arbitrary file modification outside the intended directory can lead to unauthorized data overwrites or code execution with the permissions of the extracting process. GluonTS is typically utilized in data science workflows and time-series model pipelines where dataset archives are decompressed. Exploitation requires user or pipeline interaction to process a maliciously crafted archive containing traversal links.
Mitigation
Avoid ingesting and decompressing archive files from untrusted or unverified origins. When extracting untrusted archives is necessary, run the extraction workload in an isolated container or sandboxed environment using an unprivileged user account and restrict filesystem write access to the dedicated output directory.
Caveat: Sandboxing and permission restrictions confine unauthorized file writes to the isolated environment boundary, but do not prevent file modification inside the designated target directory.
--- CME Mitigation Guidance (2026-11-06) ---
Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.
The highest-value action is to canonicalize extracted archive member targets and reject symbolic or hard links resolving outside the destination directory in GluonTS archive extraction routines: upgrade to GluonTS 0.17.0+ (or the corresponding fixed Red Hat builds), which filter or reject link members targeting paths outside the intended extraction directory, closing all 2 injection vectors (symbolic links in crafted tar archive, hard links in crafted tar archive). Until patched, this is a concern on Data science workflows and automated pipelines extracting tar archives using GluonTS, so Avoid extracting archives from untrusted sources, or isolate extraction workloads within sandboxed containers running as unprivileged users with filesystem writes restricted to the output directory. As a compensating measure, Deploy EDR agents to detect anomalous file write activity and subsequent execution of dropped files outside the extraction destination, Configure auditd to audit open, link, and symlink syscalls to record unauthorized file creation outside the target path, Use Falco or eBPF runtime monitoring to detect unexpected file writes or link creations outside the intended extraction directory, and Employ file integrity monitoring to detect unauthorized changes if path traversal overwrites system or configuration files. These controls limit blast radius and contain exploitation, but they do not fix the underlying path traversal defect — apply the upstream patch to fully remediate.
Highest-impact CME: CME-1301 Path Traversal Prevention (Canonicalization) (high)
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7.8 | N/A | 7.8 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | None | N/A | None |
| User Interaction | Required | N/A | Required |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | High | N/A | High |
| Integrity Impact | High | N/A | High |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cve.org: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Understanding the Weakness (CWE)
Confidentiality,Integrity,Access Control
Technical Impact: Read Files or Directories; Modify Files or Directories; Bypass Protection Mechanism
An attacker may be able to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. If the files are used for a security mechanism then an attacker may be able to bypass the mechanism.
Other
Technical Impact: Execute Unauthorized Code or Commands
Windows simple shortcuts, sometimes referred to as soft links, can be exploited remotely since a ".LNK" file can be uploaded like a normal file. This can enable remote execution.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
