CVE-2026-11816

[CVE catalog]

Severity

High · CVSS 8.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Published

Jun 11, 2026, 1:31:52 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.56% · Oct 25, 2026

A flaw was found in Keras. Attackers can exploit a path traversal vulnerability in the archive extraction utilities, specifically `filter_safe_tarinfos()` and `filter_safe_zipinfos()`. This occurs because the validation of archive member paths is performed against the process's current working directory (CWD) instead of the actual extraction destination. When the CWD is set to the filesystem root, this allows malicious paths to bypass security checks. Successful exploitation can lead to arbitrary file writes outside the intended directory, potentially enabling attackers to overwrite critical configuration files, inject malicious code, or corrupt machine learning data. keras: Keras: Arbitrary file write via path traversal in archive extraction utilities Exploitation requires processing a crafted archive (default CNA vector includes UI:R). For RHOAI, the highest-risk path is KServe storage-initializer auto-extraction of attacker-supplied model artifacts (Important), not unauthenticated network RCE. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.