---
id: CVE-2024-55459
aliases:
  - GHSA-cjgq-5qmw-rcj6
  - PYSEC-2025-121
title: keras Path Traversal vulnerability
summary: keras Path Traversal vulnerability
severity: medium
vendor: keras
product: keras
ecosystem: pip
affected:
  - keras <= 3.7.0
published: '2025-01-08'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T03:50:21.927124476Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-cjgq-5qmw-rcj6'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-55459'
  - url: 'https://github.com/keras-team/keras'
  - url: >-
      https://github.com/keras-team/keras/blob/8f5592bcb61ff48c96560c8923e482db1076b54a/keras/src/utils/file_utils.py#L115
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/keras/PYSEC-2025-121.yaml
  - url: 'https://keras.io'
  - url: >-
      https://river-bicycle-f1e.notion.site/Arbitrary-File-Write-Vulnerability-in-get_file-function-11888e31952580179224e50892976d32
tags:
  - osv
  - pip
epss: 0.00231
epssPercentile: 0.1418
ingestedAt: '2026-09-12T03:13:01.688Z'
---

## Overview

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.

## Affected packages

- `keras <= 3.7.0`

## Remediation

Refer to the advisory for the patched release.