CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS
CVE-2026-122266
Summary
Bulletin ID: 2026-171-AWS
Publication Date: 11/05/2026 08:30 AM PST
Description:
GluonTS is an open-source Python library for probabilistic time series modeling. We identified CVE-2026-119083, an issue in the archive extraction utility in GluonTS before 0.17.0. An actor who supplies a crafted tar archive containing symbolic or hard links might be able to write arbitrary files outside the intended extraction directory with the privileges of the extracting process.
Impacted versions: < 0.17.0
Refer to the article below for the most up-to-date and complete information.
Read this article
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
Separate remediation guidance was not included in the collected bulletin.
CVEs in this advisory 1
Updates
- Published by AWS
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.