Medium6.1Red Hat Linux Updated

Path Traversal in keras-team/keras

CVE-2026-12479 Published Jun 22, 2026Updated by vendor Jun 22, 2026

Affected products & platforms

Red Hat LinuxUnclassified

Summary

Path Traversal in keras-team/keras. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-22.

Recommended fix / mitigation

Users should avoid saving or loading Keras models from untrusted sources within Red Hat OpenShift AI. Ensure that all Keras models processed originate from trusted repositories or have been thoroughly vetted for integrity. Implementing strict access controls and sandboxing for environments handling Keras model operations can further limit the potential impact. If the service is reloaded or restarted, these operational controls will remain in effect.

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.