Package vulnerability, severity medium
GluonTS arbitrary file write during tar archive extraction (CVE-2026-119083) fixed in 0.17.0
Published
The archive extraction utility in GluonTS before 0.17.0 can be abused with a crafted tar archive containing symbolic or hard links to write arbitrary files outside the intended extraction directory. Files are written with the privileges of the extracting process. The issue is fixed in gluonts 0.17.0.
What's affected
- gluonts (pypi)<0.17.0
What to do
- Upgrade gluonts to version 0.17.0 or later.
- Ensure any forked or derivative code is patched to incorporate the fix.
- If you cannot upgrade immediately, do not use GluonTS to extract tar archives from untrusted or unverified sources.
- Running on Python 3.14 or later applies the tar data extraction filter by default, which blocks the link-based traversal.
Check whether you were affected
Pharon tells teams automatically when this affects something they run. To check a machine, run this in Claude Code with the Pharon plugin, in the repository that uses it:
/pharon:check-incident gluonts-tar-extraction-file-write-2026-11References
Notice gluonts-tar-extraction-file-write-2026-11, signed with key feed-prod-2026-10 (Ed25519). The Pharon CLI verifies the signature before using a notice.