CVE-2026-2492 affecting package tensorflow for versions less than 2.16.1-11

CVE-2026-2492 affecting package tensorflow for versions less than 2.16.1-11. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2026-2492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate...

CVE-2026-2492

A flaw was found in TensorFlow. This vulnerability allows a local attacker to escalate privileges and execute arbitrary code. The flaw exists within the HDF5 library's handling of plugins, which are loaded from an unsecured location. An attacker with low-privileged code execution can exploit this...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4412 more potentially affected by CVE-2026-2492 via tensorflow (>=2.0.0 <=2.21.0)

tensorflow PYPI version =2.0.0, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =1.0.0, =0.0.1, =0.2.0, =0.6.0, =0.1.0, =0.1.0, =0.2.0 - academic-emotion =0.1.2 and more Source cves: CVE-2026-2492 Source advisory: SNYK:PYTHON-TENSORFLOW-15325644...

CVE-2026-2492

creationtimestamp| type| source ---|---|--- 2026-02-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-116/...