Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-2331-v9sq-4qb9
Vulnerability ID VCID-2331-v9sq-4qb9
Aliases CVE-2025-12060
GHSA-hjqc-jx6g-rwp9
Summary The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special symlinks, which, when extracted, allows them to write arbitrary files to any location on the filesystem outside of the intended destination folder. This vulnerability is linked to the underlying Python tarfile weakness, identified as CVE-2025-4517. Note that upgrading Python to one of the versions that fix CVE-2025-4517 (e.g. Python 3.13.4) is not enough. One additionally needs to upgrade Keras to a version with the fix (Keras 3.12).
Status Published
Exploitability 0.5
Weighted Severity 8.8
Risk 4.4
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 8.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-12060.json
epss 0.00105 https://api.first.org/data/v1/epss?cve=CVE-2025-12060
epss 0.00105 https://api.first.org/data/v1/epss?cve=CVE-2025-12060
epss 0.00105 https://api.first.org/data/v1/epss?cve=CVE-2025-12060
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-hjqc-jx6g-rwp9
cvssv3.1 9.8 https://github.com/keras-team/keras
cvssv4 8.9 https://github.com/keras-team/keras
generic_textual HIGH https://github.com/keras-team/keras
cvssv3.1 9.8 https://github.com/keras-team/keras/commit/47fcb397ee4caffd5a75efd1fa3067559594e951
cvssv4 8.9 https://github.com/keras-team/keras/commit/47fcb397ee4caffd5a75efd1fa3067559594e951
generic_textual HIGH https://github.com/keras-team/keras/commit/47fcb397ee4caffd5a75efd1fa3067559594e951
cvssv3.1 9.8 https://github.com/keras-team/keras/pull/21760
cvssv4 8.9 https://github.com/keras-team/keras/pull/21760
generic_textual HIGH https://github.com/keras-team/keras/pull/21760
ssvc Track https://github.com/keras-team/keras/pull/21760
cvssv3.1 9.8 https://github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
cvssv3.1_qr HIGH https://github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
cvssv4 8.9 https://github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
generic_textual HIGH https://github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
ssvc Track https://github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
cvssv3.1 9.8 https://huntr.com/bounties/f94f5beb-54d8-4e6a-8bac-86d9aee103f4
cvssv4 8.9 https://huntr.com/bounties/f94f5beb-54d8-4e6a-8bac-86d9aee103f4
generic_textual HIGH https://huntr.com/bounties/f94f5beb-54d8-4e6a-8bac-86d9aee103f4
cvssv3.1 9.8 https://nvd.nist.gov/vuln/detail/CVE-2025-12060
cvssv4 8.9 https://nvd.nist.gov/vuln/detail/CVE-2025-12060
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2025-12060
cvssv3.1 9.8 https://nvd.nist.gov/vuln/detail/CVE-2025-12638
cvssv4 8.9 https://nvd.nist.gov/vuln/detail/CVE-2025-12638
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2025-12638
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-12060.json
https://api.first.org/data/v1/epss?cve=CVE-2025-12060
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12060
https://github.com/keras-team/keras/commit/47fcb397ee4caffd5a75efd1fa3067559594e951
21760 https://github.com/keras-team/keras/pull/21760
2407443 https://bugzilla.redhat.com/show_bug.cgi?id=2407443
CVE-2025-12060 https://nvd.nist.gov/vuln/detail/CVE-2025-12060
CVE-2025-12638 https://nvd.nist.gov/vuln/detail/CVE-2025-12638
GHSA-hjqc-jx6g-rwp9 https://github.com/advisories/GHSA-hjqc-jx6g-rwp9
GHSA-hjqc-jx6g-rwp9 https://github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
RHSA-2025:22759 https://access.redhat.com/errata/RHSA-2025:22759
RHSA-2025:23531 https://access.redhat.com/errata/RHSA-2025:23531
RHSA-2026:5807 https://access.redhat.com/errata/RHSA-2026:5807
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-12060.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/keras-team/keras
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Found at https://github.com/keras-team/keras
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/keras-team/keras/commit/47fcb397ee4caffd5a75efd1fa3067559594e951
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Found at https://github.com/keras-team/keras/commit/47fcb397ee4caffd5a75efd1fa3067559594e951
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/keras-team/keras/pull/21760
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Found at https://github.com/keras-team/keras/pull/21760
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-11-01T03:55:52Z/ Found at https://github.com/keras-team/keras/pull/21760
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Found at https://github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-11-01T03:55:52Z/ Found at https://github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.com/bounties/f94f5beb-54d8-4e6a-8bac-86d9aee103f4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Found at https://huntr.com/bounties/f94f5beb-54d8-4e6a-8bac-86d9aee103f4
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2025-12060
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Found at https://nvd.nist.gov/vuln/detail/CVE-2025-12060
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2025-12638
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Found at https://nvd.nist.gov/vuln/detail/CVE-2025-12638
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.28031
EPSS Score 0.00105
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:00:45.218956+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2025/12xxx/CVE-2025-12060.json 38.6.0