CVE-2026-12479

Name of the Vulnerable Software and Affected Versions keras-team/keras version 3.14.0

Description A path traversal issue exists in the Keras 3 model saving and loading library. The DiskIOStore.make() function fails to sanitize user-provided layer names for parent directory components (..) when constructing directory paths. Although forward slashes are restricted, the lack of traversal sequence filtering allows a malicious model to escape the intended temporary working directory. This can lead to unauthorized file system operations, including the creation of directories or writing files in arbitrary locations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.