TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True.
Date: 2021-06
Affected: google/tensorflow
Attack vector: path-traversal
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2021-35958
CWE: CWE-22
CVSS: 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)

TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.get_file is not intended for untrusted archives


Mitigations:

Architectural layers (MAESTRO):