CVE-2026-12482

Name of the Vulnerable Software and Affected Versions keras-team/keras version 3.12.0

Description An issue exists in keras/src/utils/file utils.py where the filter safe tarinfos validation is bypassed when processing malicious tar archives. Symlink entries do not undergo the same is path in dir validation as regular files, enabling the creation of symlinks outside the intended extraction directory. This can result in directory escape, file overwrite, or unauthorized file read attacks. The impact is higher on Python 3.10 and 3.11 because filter safe tarinfos serves as the primary defense against tar path traversal, a technique used to access files outside the target folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.