PYSEC-2026-1486 Keras Directory Traversal Vulnerability

🗓️ 07 Jul 2026 16:03:11Reported by GoogleType

osv🔗 osv.dev👁 6 Views

Keras get_file tar extraction bypasses path filtering due to path length bug in tarfile.extractall.

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Python affect IBM Robotic Process Automation	16 Jan 202616:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	29 Dec 202505:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in keras-3.11.3-py3-none-any.whl	4 Feb 202622:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses keras-3.10.0-py3-none-any.whl, keras-2.14.0-py3-none-any.whl which are vulnerable to CVE-2025-12058, CVE-2025-12060, CVE-2025-9905, CVE-2025-9906.	30 Jan 202605:35	–	ibm
IBM Security Bulletins	Security Bulletin: Arbitrary File Read, SSRF, and Code Execution Vulnerabilities in TensorFlow Keras Model Loading (v2.13) affects watsonx.data	8 Apr 202608:40	–	ibm
Huntr	Symlink Member Name Not Validated in filter_safe_tarinfos — Symlink Created Outside Extraction Directory	15 Apr 202605:12	–	huntr
Huntr	Path Traversal in Keras Archive Extraction via CWD Validation Bypass Leading to Arbitrary File Write	13 Mar 202613:22	–	huntr
Huntr	Path traversal via startswith() prefix confusion in is_path_in_dir (bypass of CVE-2025-12638 fix)	21 Feb 202606:25	–	huntr
Huntr	Path Traversal vulnerability in keras using tar extract	30 Aug 202514:05	–	huntr
BDU FSTEC	The vulnerability of the keras.utils.get_file() function in the Keras library allows a hacker to execute arbitrary code.	21 Apr 202600:00	–	bdu_fstec

Source	Link
github	www.github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12060
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12638
github	www.github.com/keras-team/keras/pull/21760
github	www.github.com/keras-team/keras/commit/47fcb397ee4caffd5a75efd1fa3067559594e951
github	www.github.com/keras-team/keras
huntr	www.huntr.com/bounties/f94f5beb-54d8-4e6a-8bac-86d9aee103f4
pypi	www.pypi.org/project/keras
github	www.github.com/advisories/GHSA-hjqc-jx6g-rwp9

07 Jul 2026 17:47Current

7.2High risk

Vulners AI Score7.2

CVSS 48.9

CVSS 3.19.8

EPSS0.00605