CVE-2026-12479
published 2026-06-22CVE-2026-12479: A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method within the Keras 3 model saving and…
PriorityP434medium6.1CVSS 3.0
AVLACLPRNUIRSCCLILAL
EPSS
0.38%
31.2th percentile
A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method within the Keras 3 model saving and loading library. This vulnerability arises from the improper handling of user-provided layer names, which are used to construct directory paths without sanitizing for parent directory components (`..`). While forward slashes (`/`) are restricted in layer names, directory traversal sequences are not. This allows an attacker to craft a malicious Keras model that, when saved or loaded, can escape the intended temporary working directory and perform unauthorized file system operations, such as creating directories or writing files in arbitrary locations.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| keras-team | keras-team_keras | unspecified – latest | — |
| keras | keras | >= 0 < 3.12.3 | 3.12.3 |
| keras | keras | >= 3.13.0 < 3.15.0 | 3.15.0 |
| rhoai | odh-modelmesh-runtime-adapter-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 | — | — |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
vendor_redhat6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method within the Keras 3 model saving and loading library.
ghsa_unreviewed·2026-06-22
CVE-2026-12479 [MEDIUM] CWE-22 A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method within the Keras 3 model saving and loading library.
A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method within the Keras 3 model saving and loading library. This vulnerability arises from the improper handling of user-provided layer names, which are used to construct directory paths without sanitizing for parent directory components (`..`). While forward slashes (`/`) are restricted in layer names, directory traversal sequences are not. This allows an attacker to craft a malicious Keras model that, when saved or loaded, can escape the intended temporary working directory and perform unauthorized file system operations, such as creating directories or writing files in arbitrary locations.
GHSA
Keras: DiskIOStore permits path traversal through crafted layer names
ghsa·2026-06-22
CVE-2026-12479 [MEDIUM] CWE-22 Keras: DiskIOStore permits path traversal through crafted layer names
Keras: DiskIOStore permits path traversal through crafted layer names
A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method within the Keras 3 model saving and loading library. This vulnerability arises from the improper handling of user-provided layer names, which are used to construct directory paths without sanitizing for parent directory components (`..`). While forward slashes (`/`) are restricted in layer names, directory traversal sequences are not. This allows an attacker to craft a malicious Keras model that, when saved or loaded, can escape the intended temporary working directory and perform unauthorized file system operations, such as creating directories or writing files in arbitrary locations.
VulDB
keras-team keras up to 3.14.0 DiskIOStore.make path traversal
vuldb·2026-06-22·CVSS 6.1
CVE-2026-12479 [MEDIUM] keras-team keras up to 3.14.0 DiskIOStore.make path traversal
A vulnerability identified as critical has been detected in keras-team keras up to 3.14.0. Affected by this issue is the function DiskIOStore.make. This manipulation causes path traversal.
This vulnerability appears as CVE-2026-12479. The attack requires local access. There is no available exploit.
Red Hat
keras: Path Traversal in keras-team/keras
vendor_redhat·2026-06-22·CVSS 6.1
CVE-2026-12479 [MEDIUM] CWE-22 keras: Path Traversal in keras-team/keras
keras: Path Traversal in keras-team/keras
A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method within the Keras 3 model saving and loading library. This vulnerability arises from the improper handling of user-provided layer names, which are used to construct directory paths without sanitizing for parent directory components (`..`). While forward slashes (`/`) are restricted in layer names, directory traversal sequences are not. This allows an attacker to craft a malicious Keras model that, when saved or loaded, can escape the intended temporary working directory and perform unauthorized file system operations, such as creating directories or writing files in arbitrary locations.
A flaw was found in Keras, specifically in
No detection rules found.
No public exploits indexed.
2026-06-22
Published