{"data":{"id":"0422f4a4-1e49-48aa-98a9-f81cf16102b9","title":"CVE-2026-11816: Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in…","summary":"Keras versions prior to 3.14.0 contain a path traversal flaw in the archive extraction utilities in `keras/src/utils/file_utils.py`. The functions `filter_safe_tarinfos()` and `filter_safe_zipinfos()` check archive member paths against the process current working directory instead of the extraction destination, so when the working directory is `/`, as is common in Docker containers, CI/CD runners and Jupyter environments, traversal paths bypass the check. An attacker can cause arbitrary file writes outside the extraction directory, enabling overwrites of configuration files, malicious code injection or corruption of machine learning datasets and pipelines.","solution":"Fixed in 3.14.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-11816","publishedAt":"2026-06-11T14:16:26.557Z","cveId":"CVE-2026-11816","cweIds":["CWE-22"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["keras@< 3.14.0 (fixed: 3.14.0)"],"affectedPackageNames":["keras"],"affectedPackageRefs":["pypi:keras"],"affectedVendors":["Google"],"affectedVendorsRaw":["Keras"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Keras path traversal in archive extraction utilities","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00563,"epssCheckedAt":"2026-10-27T12:09:03.980Z","kevDateAdded":null,"advisoryAliases":["GHSA-hqp4-2352-xf5r"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:42.287Z","patchAvailable":true,"disclosureDate":"2026-06-11T14:16:26.557Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}