GluonTS Arbitrary File Write Vulnerability – Update Required

GluonTS before version 0.17.0 has a nasty path traversal bug (CVE-2026-119083) in its archive extraction code. If you extract a malicious tar file with symlinks or hardlinks, an attacker could write files anywhere on your system with your process privileges. You definitely need to upgrade to 0.17.0 or later—this one's worth prioritizing.