ZDI-26-116 HIGH 7.0 Published Feb 19, 2026

TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

TensorFlow

CVE-2026-2492 is a high-severity privilege escalation vulnerability in TensorFlow that allows local attackers with low-privileged code execution to gain elevated system privileges. An attacker exploiting this flaw could potentially compromise the entire system or access sensitive data with administrative rights. Security teams should prioritize patching TensorFlow installations, restrict local code execution capabilities, and monitor systems for suspicious privilege escalation attempts.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy