PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-12479 keras-team CVE debrief

A path traversal vulnerability was discovered in the keras-team/keras library, version 3.14.0. The vulnerability exists in the `DiskIOStore.make` method, where user-provided layer names are used to construct directory paths without proper sanitization. This allows attackers to craft malicious Keras models that can escape the intended temporary working directory and perform unauthorized file system operations. The vulnerability has a CVSS score of 6.1 and is classified as MEDIUM severity. The CVE was published on June 22, 2026, at 16:16:33.953Z and modified on June 22, 2026, at 19:49:09.490Z.

Vendor
keras-team
Product
keras-team/keras
CVSS
MEDIUM 6.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-22
Original CVE updated
2026-06-22
Advisory published
2026-06-22
Advisory updated
2026-06-22

Who should care

Developers and users of the keras-team/keras library, version 3.14.0, should be aware of this vulnerability and take necessary precautions to prevent exploitation. This includes ensuring that the library is updated to a patched version and validating user-provided input to prevent path traversal attacks. Additionally, users of Keras should be cautious when loading or saving models from untrusted sources.

Technical summary

The path traversal vulnerability in keras-team/keras arises from the improper handling of user-provided layer names in the `DiskIOStore.make` method. While forward slashes are restricted in layer names, directory traversal sequences are not, allowing attackers to craft malicious models that can escape the intended temporary working directory. The vulnerability has a CVSS vector of CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. The CWE associated with this vulnerability is CWE-22.

Defensive priority

High priority should be given to updating the keras-team/keras library to a patched version. Additionally, defenders should validate user-provided input and implement compensating controls to prevent path traversal attacks.

Recommended defensive actions

  • Update the keras-team/keras library to a patched version.
  • Validate user-provided input to prevent path traversal attacks.
  • Implement compensating controls to detect and prevent unauthorized file system operations.
  • Monitor for suspicious activity and implement exception tracking.
  • Perform regular inventory checks to ensure that all instances of the keras-team/keras library are updated and patched.

Evidence notes

The evidence for this CVE comes from the NVD and Huntr sources. The NVD provides official vulnerability database information, while Huntr provides additional details on the vulnerability. The CVE was published on June 22, 2026, and modified on June 22, 2026.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-12479 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-12479

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-12479 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-12479

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.