CVE-2025-12060: Keras 3.0.0 through 3.11.3

Affected technology

Keras · 3.0.0 through 3.11.3
Keras

Component: Not specified by the source
Function: without
File: get_file

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · Passive user interaction

What an attacker can do

A remote attacker can craft a malicious tar archive containing special symlinks, which, when extracted, allows them to write arbitrary files to any location on the filesystem outside of the intended destination folder. Vendor/CNA’s CVSS 4.0 assessment (base score 8.9/10) rates confidentiality, integrity and availability impact as high.