CVE-2026-12479
Description
A flaw was found in Keras, specifically in the model saving and loading library. This path traversal vulnerability occurs due to improper handling of user-provided layer names, which allows an attacker to craft a malicious Keras model. When this model is saved or loaded, it can escape its intended temporary directory. This enables unauthorized file system operations, such as creating directories or writing files in arbitrary locations.
Statement
Moderate: A path traversal flaw in Keras 3, as used in Red Hat OpenShift AI, allows an attacker to craft a malicious model that, when saved or loaded, can write files to arbitrary locations outside the intended temporary directory. This vulnerability requires user interaction to process a specially crafted Keras model.
Mitigation
Users should avoid saving or loading Keras models from untrusted sources within Red Hat OpenShift AI. Ensure that all Keras models processed originate from trusted repositories or have been thoroughly vetted for integrity. Implementing strict access controls and sandboxing for environments handling Keras model operations can further limit the potential impact. If the service is reloaded or restarted, these operational controls will remain in effect.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 6.1 | N/A | 6.1 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | None | N/A | None |
| User Interaction | Required | N/A | Required |
| Scope | Changed | N/A | Changed |
| Confidentiality | Low | N/A | Low |
| Integrity Impact | Low | N/A | Low |
| Availability Impact | Low | N/A | Low |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
cve.org: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
