Keras: tar extraction permits symlink-based path traversal

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in keras/src/utils/fileutils.py. Specifically, symlink entries are not subjected to the same ispathindir validation as regular file entries,...

PYSEC-2026-3630 Keras: tar extraction permits symlink-based path traversal

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in keras/src/utils/fileutils.py. Specifically, symlink entries are not subjected to the same ispathindir validation as regular file entries,...

CVE-2026-12482

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in keras/src/utils/fileutils.py. Specifically, symlink entries are not subjected to the same ispathindir validation as regular file entries,...

CVE-2026-12482

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in keras/src/utils/fileutils.py. Specifically, symlink entries are not subjected to the same ispathindir validation as regular file entries,...

CVE-2026-12482

The CVE-2026-12482 entry concerns keras-team/keras 3.12.0. A crafted tar archive can bypass filter_safe_tarinfos in keras/src/utils/file_utils.py, because symlink entries are not consistently validated by is_path_in_dir as regular files, enabling symlinks to escape the extraction directory. Poten...

CVE-2026-12482 Path Traversal via Symlink Name Validation Bypass in keras-team/keras

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in keras/src/utils/fileutils.py. Specifically, symlink entries are not subjected to the same ispathindir validation as regular file entries,...

CVE-2026-12482 Path Traversal via Symlink Name Validation Bypass in keras-team/keras

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in keras/src/utils/fileutils.py. Specifically, symlink entries are not subjected to the same ispathindir validation as regular file entries,...

EUVD-2026-43620

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in keras/src/utils/fileutils.py. Specifically, symlink entries are not subjected to the same ispathindir validation as regular file entries,...

PT-2026-57960

Name of the Vulnerable Software and Affected Versions keras-team/keras version 3.12.0 Description An issue exists in keras/src/utils/file utils.py where the filter safe tarinfos validation is bypassed when processing malicious tar archives. Symlink entries do not undergo the same is path in dir...

PT-2026-57834

Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in keras/src/utils/file utils.py. The functions filter safe tarinfos and filter safe zipinfos validate archive member paths against the process current working directory CWD instead...

Symlink Member Name Not Validated in filter_safe_tarinfos — Symlink Created Outside Extraction Directory

Description filtersafetarinfos in keras/src/utils/fileutils.py validates member names for regular files via ispathindir line 79, but for symlink entries it only validates the link target via islinkindir line 76 — the symlink's own info.name which determines where the symlink is created on disk is...