Local Privilege Escalation Vulnerability in TensorFlow HDF5 Library by Google

CVE-2026-2492

What is CVE-2026-2492?

This vulnerability in the TensorFlow HDF5 Library arises from the handling of plugins, where the application loads them from an unsecured location. Local attackers with low privileges can exploit this flaw to escalate their privileges, allowing them to execute arbitrary code in the context of the target user. To exploit this vulnerability, an attacker must already have the ability to execute low-privileged code, making it crucial for organizations utilizing TensorFlow to secure their environments against potential abuse.

References