PT-2025-48332 · Keras+1 · Keras+1

Published 2025-11-28 · Updated 2025-12-03 · CVE-2025-12638

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Keras version 3.11.3

Description Keras version 3.11.3 has a path traversal issue in the keras.utils.get file() function when handling tar archives. The problem occurs because the function utilizes Python’s tarfile.extractall() method without the filter='data' parameter. While Keras includes a filter safe paths() function to filter unsafe paths, a PATH MAX symlink resolution bug during extraction bypasses this security measure. This allows files to be written outside the intended extraction directory, potentially leading to arbitrary file writes and system compromise. The issue impacts Keras installations processing tar archives with get file().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

AZL-71185

BDU:2026-05650

CVE-2025-12638

GHSA-9G7V-8WXV-MWXP

Affected Products

Debian

Keras

References · 16

• https://ubuntu.com/security/CVE-2025-12638 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-12638 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05650 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-12638 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-12638 · Security Note
• https://osv.dev/vulnerability/GHSA-9g7v-8wxv-mwxp · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-12638 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-12638 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-71185 · Vendor Advisory
• https://github.com/keras-team/keras · Note
• https://github.com/keras-team/keras/commit/47fcb397ee4caffd5a75efd1fa3067559594e951 · Note
• https://t.me/CVEtracker/38437 · Telegram Post
• https://huntr.com/bounties/f94f5beb-54d8-4e6a-8bac-86d9aee103f4 · Note
• https://twitter.com/CVEnew/status/1994410034051125487 · Twitter Post
• https://t.me/cveNotify/144238 · Telegram Post