Path Traversal Vulnerability in Keras Model Saving and Loading Library by Keras Team

CVE-2026-12479

What is CVE-2026-12479?

A path traversal vulnerability is present in Keras version 3.14.0, specifically within the DiskIOStore.make method. This issue stems from insufficient sanitization of user-supplied layer names, which are used to build directory paths. While forward slashes are restricted in layer names, attackers can exploit the lack of restrictions on directory traversal sequences. By crafting a malicious Keras model, an attacker can execute unauthorized file system operations, such as creating directories or writing files outside of the intended temporary working directory. This poses significant security risks, allowing for potential manipulation of sensitive data and system integrity.

References