Keras Directory Traversal Vulnerability

🗓️ 07 Jul 2026 16:03:11Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 26 Views

Keras get_file extraction is vulnerable to directory traversal via PATH_MAX symlink bug bypassing.

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Python affect IBM Robotic Process Automation	16 Jan 202616:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	29 Dec 202505:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in keras-3.11.3-py3-none-any.whl	4 Feb 202622:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses keras-3.10.0-py3-none-any.whl, keras-2.14.0-py3-none-any.whl which are vulnerable to CVE-2025-12058, CVE-2025-12060, CVE-2025-9905, CVE-2025-9906.	30 Jan 202605:35	–	ibm
IBM Security Bulletins	Security Bulletin: Arbitrary File Read, SSRF, and Code Execution Vulnerabilities in TensorFlow Keras Model Loading (v2.13) affects watsonx.data	8 Apr 202608:40	–	ibm
Huntr	Symlink Member Name Not Validated in filter_safe_tarinfos — Symlink Created Outside Extraction Directory	15 Apr 202605:12	–	huntr
Huntr	Patched get_file tar traversal remains exploitable on supported Python 3.11	1 May 202614:16	–	huntr
Huntr	Path Traversal in Keras Archive Extraction via CWD Validation Bypass Leading to Arbitrary File Write	13 Mar 202613:22	–	huntr
CBLMariner	CVE-2025-12060 affecting package keras for versions less than 3.3.3-5	6 Nov 202515:48	–	cbl_mariner
Chainguard	CVE-2025-12060 vulnerabilities	4 Nov 202501:23	–	cgr

Vulners

Node

pypi kerasRange0–3.12.0

Source	Link
github	www.github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12060
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12638
github	www.github.com/keras-team/keras/pull/21760
github	www.github.com/keras-team/keras/commit/47fcb397ee4caffd5a75efd1fa3067559594e951
github	www.github.com/keras-team/keras
huntr	www.huntr.com/bounties/f94f5beb-54d8-4e6a-8bac-86d9aee103f4
pypi	www.pypi.org/project/keras
github	www.github.com/advisories/GHSA-hjqc-jx6g-rwp9

07 Jul 2026 17:24Current

6Medium risk

Vulners AI Score6

CVSS 48.9

CVSS 3.19.8

EPSS0.00584

SSVC