Aller au contenu
en Se connecter
7.0 Élevée

CVE-2026-2492 TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Description

TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of TensorFlow. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of plugins. The application loads plugins from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-25480.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat OpenShift AI 2.25 1776319453 premières → < 1776319453 1776319453
Red Hat OpenShift AI (RHOAI) Versions non publiées
tensorflow 2.17.0 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat OpenShift AI 2.25

Les 140 CVE de Red Hat OpenShift AI 2.25 →
CVE-2026-86332 A flaw was found in odh-dashboard in Red Hat OpenShift AI 6.5 Moyenne CVE-2026-18620 A flaw was found in Data Science Pipelines 7.1 Élevée CVE-2026-18618 A flaw was found in ml-metadata 7.5 Élevée CVE-2026-18611 A flaw was found in the Data Science Pipelines Operator 7.5 Élevée
Suivre cette CVE