Path traversal in Keras - CVE-2025-12060
Published: November 17, 2025 / Updated: December 3, 2025
Vulnerability identifier: #VU118557
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-12060
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to perform directory traversal attacks.
The vulnerability exists due to input validation error in keras.utils.get_file API when used with the extract=True option for tar archives. A remote user can supply a malicious .tar archive containing special symlinks, which, when extracted, allows them to write arbitrary files to any location on the filesystem outside of the intended destination folder.
Affected software
Keras
IBM Watson Discovery for IBM Cloud Pak for Data
Red Hat OpenShift AI (RHOAI)
Maximo Application Suite Ai Service
IBM Watson Discovery for IBM Cloud Pak for Data
Red Hat OpenShift AI (RHOAI)
Maximo Application Suite Ai Service
How to mitigate CVE-2025-12060
Install updates from vendor's website.
Keras - update to 3.12.0
IBM Watson Discovery for IBM Cloud Pak for Data - update to 5.3.0
Maximo Application Suite Ai Service - update to 9.1.10
Red Hat OpenShift AI (RHOAI) - addressed in versions 2.22.3, 2.25.1
IBM Watson Discovery for IBM Cloud Pak for Data - update to 5.3.0
Maximo Application Suite Ai Service - update to 9.1.10
Red Hat OpenShift AI (RHOAI) - addressed in versions 2.22.3, 2.25.1