The vulnerability involves unsafe deserialization of untrusted data in the model loading component of Amazon GluonTS. A crafted serialized model directory can trigger the execution of arbitrary operating system commands with the privileges of the loading process. This flaw stems from insecure handling of user‑supplied data during deserialization, categorized as CWE-470 and CWE-502, and enables attackers to compromise confidentiality, integrity, and availability of the affected system.

Affected systems include all installations of AWS GluonTS prior to version 0.17.0. The product is available from the AWS GluonTS distribution and operates on any supported operating system. No specific sub‑versions are listed, so all releases before the 0.17.0 update are considered vulnerable.

The CVSS score of 8.4 classifies the weakness as high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no known widespread exploitation yet. However, the absence of EPSS limits precision in estimating the likelihood of exploitation. The flaw is exploitable when an attacker can provide a malicious serialized model directory to the deserialization routine. The CVE does not specify whether the model directory is accessed locally or remotely; the exact attack vector depends on how the model loading function is exposed in the environment. With unrestricted deserialization, the attacker can run any command that the process is allowed to execute.