PT-2026-59829

Impact If RaggedTensorToVariant is given a rt nested splits list that contains tensors of ranks other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf batched input = True rt nested splits = tf.constant0,32,64, shape=3,...

PT-2026-59835

Impact When tf.random.gamma receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg 0=tf.random.uniformshape=4,, dtype=tf.int32, maxval=65536 arg 1=tf.random.uniformshape=4, 4, dtype=tf.float64, maxval=None arg...

PT-2026-59879

Impact Inputs dense features or example state data not of rank 2 will trigger a CHECK fail in SdcaOptimizer. python import tensorflow as tf tf.raw ops.SdcaOptimizer sparse example indices=4 tf.random.uniform5,5,5,3, dtype=tf.dtypes.int64, maxval=100, sparse feature indices=4...

PT-2026-59920

Impact If FakeQuantWithMinMaxVarsPerChannel is given min or max tensors of a rank other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf num bits = 8 narrow range = False inputs = tf.constant0, shape=4, dtype=tf.float32 mi...

PT-2026-59921

Impact When TensorListFromTensor receives an element shape of a rank greater than one, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg 0=tf.random.uniformshape=6, 6, 2, dtype=tf.bfloat16, maxval=None arg 1=tf.random.uniformshape=6, 9, 1, 3,...

PT-2026-59925

Impact When RandomPoissonV2 receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg 0=tf.random.uniformshape=4,, dtype=tf.int32, maxval=65536 arg 1=tf.random.uniformshape=4, 4, 4, 4, 4, dtype=tf.float32, maxval=No...

PT-2026-59968

Impact When tf.random.gamma receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg 0=tf.random.uniformshape=4,, dtype=tf.int32, maxval=65536 arg 1=tf.random.uniformshape=4, 4, dtype=tf.float64, maxval=None arg...

PT-2026-59936

Impact Eig can be fed an incorrect Tout input, resulting in a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg 0=tf.constantvalue=np.random.randomsize=2, 2, shape=2, 2, dtype=tf.float32 arg 1=tf.complex128 arg 2=True arg 3='' tf.raw...

PT-2026-59957

Impact When MaxPool receives a window size input array ksize with dimensions greater than its input tensor input, the GPU kernel gives a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf import numpy as np input = np.ones1, 1, 1, 1 ksize = 1, 1, 2, ...

PT-2026-59705

Impact Inputs dense features or example state data not of rank 2 will trigger a CHECK fail in SdcaOptimizer. python import tensorflow as tf tf.raw ops.SdcaOptimizer sparse example indices=4 tf.random.uniform5,5,5,3, dtype=tf.dtypes.int64, maxval=100, sparse feature indices=4...

PT-2026-57806

Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4, 10.11.x = 10.11.19 fail to check the manage shared channels permission in the /share-channel autocomplete handler, which allows an authenticated user without that permission to enumerate configured remote cluster connection metadata via slash...

PT-2026-59966

Impact When Unbatch receives a nonscalar input id, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg 0=tf.constantvalue=np.random.randomsize=3, 3, 1, dtype=tf.float64 arg 1=tf.constantvalue=np.random.randint0,100,size=3, 3, 1,...

PT-2026-59989

Impact FractionalMaxPoolGrad validates its inputs with CHECK failures instead of with returning errors. If it gets incorrectly sized inputs, the CHECK failure can be used to trigger a denial of service attack: python import tensorflow as tf overlapping = True orig input = tf.constant.453409232,...

PT-2026-59967

Impact An input token that is not a UTF-8 bytestring will trigger a CHECK fail in tf.raw ops.PyFunc. python import tensorflow as tf value = tf.constantvalue=1,2 token = b'xb0' dataType = tf.int32 tf.raw ops.PyFuncinput=value,token=token,Tout=dataType Patches We have patched the issue in GitHub...

PT-2026-59934

Impact When CollectiveGather receives an scalar input input, it gives a CHECK fails that can be used to trigger a denial of service attack. python import tensorflow as tf arg 0=1 arg 1=1 arg 2=1 arg 3=1 arg 4=3, 3,3 arg 5='auto' arg 6=0 arg 7='' tf.raw ops.CollectiveGatherinput=arg 0, group...

PT-2026-59794

Impact Eig can be fed an incorrect Tout input, resulting in a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg 0=tf.constantvalue=np.random.randomsize=2, 2, shape=2, 2, dtype=tf.float32 arg 1=tf.complex128 arg 2=True arg 3='' tf.raw...

CVE-2026-61460

Krayin CRM up to version 2.2.3 is affected by an insecure direct object reference vulnerability in LeadController, PersonController, OrganizationController, QuoteController, and ActivityController. The root cause is missing record-level ownership validation in edit, update, and destroy methods, e...

EulerOS 2.0 SP12 : haveged (EulerOS-SA-2026-2532)

According to the versions of the haveged packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged. However, while it...

PYSEC-2026-3302 TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation

Impact The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure assertion failure caused by assuming input0, input1, and input2 to be scalar. python import tensorflow as tf tf.rawops.SobolSampledim=tf.constant1,0, numresults=tf.constant1, skip=tf.constant1 Patche...

PYSEC-2026-3144 TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation

Impact The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure assertion failure caused by assuming input0, input1, and input2 to be scalar. python import tensorflow as tf tf.rawops.SobolSampledim=tf.constant1,0, numresults=tf.constant1, skip=tf.constant1 Patche...