Path Traversal Vulnerability in Keras by TensorFlow

CVE-2025-12638

What is CVE-2025-12638?

Keras version 3.11.3 has a security flaw in its keras.utils.get_file() function related to path traversal during tar archive extraction. This vulnerability arises from the improper use of Python's tarfile.extractall() method, which does not implement a critical security filter. Although attempts are made to mitigate unsafe paths, a bug in symlink resolution may lead to files being written outside the intended cache directory. Such a scenario opens up avenues for unauthorized file writes, potentially compromising the system or allowing execution of malicious code.

References