CVE-2026-12482

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the `filter_safe_tarinfos` validation in `keras/src/utils/file_utils.py`. Specifically, symlink entries are not subjected to the same `is_path_in_dir` validation as regular file entries, allowing symlinks to be created outside the intended extraction directory. This can lead to symlink-based file read, file overwrite, or directory escape attacks. The issue is particularly impactful on Python 3.10 and 3.11, where `filter_safe_tarinfos` is the sole defense against tar path traversal. This vulnerability is distinct from CVE-2025-12060 and other previously reported issues.

• CWE-22

• https://huntr.com/bounties/5d3638e8-a9f6-4964-a865-ddb9fe4d4b6eExploit, Third Party Advisory
• https://huntr.com/bounties/5d3638e8-a9f6-4964-a865-ddb9fe4d4b6eExploit, Third Party Advisory

Published

Jul 14, 2026

Last Modified

Aug 6, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12476The Easy Digital Downloads plugin for WordPress is vulnerabl…7.2
• CVE-2026-12478The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) pl…4.8
• CVE-2026-12479A path traversal vulnerability exists in keras-team/keras ve…6.1
• CVE-2026-1248IBM Business Automation Workflow containers and traditional …4.3
• CVE-2026-12480Keras versions up to and including 3.13.2 are vulnerable to …5.5
• CVE-2026-12481A vulnerability in keras-team/keras version 3.14.0 allows fo…9.8
• CVE-2026-12484A vulnerability in keras-team/keras version 3.15.0 allows un…7.8
• CVE-2026-12485GV-I/O Box 4E is a smart embedded device with 4 input and 4 …10
• CVE-2026-12486Multiple OS command injection vulnerabilities exist in the l…9.1
• CVE-2026-12488A memory corruption vulnerability exists in the GV-Cloud fun…6.2
• CVE-2026-1249The MP3 Audio Player – Music Player, Podcast Player & Radio …5
• CVE-2026-12490When a provide-xfr is given with a tls-auth-name, a secondar…7.5