ZDI-26-116
HIGH 7.0
Published
Feb 19, 2026
TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
TensorFlow
CVE-2026-2492 is a high-severity privilege escalation vulnerability in TensorFlow that allows local attackers with low-privileged code execution to gain elevated system privileges. An attacker exploiting this flaw could potentially compromise the entire system or access sensitive data with administrative rights. Security teams should prioritize patching TensorFlow installations, restrict local code execution capabilities, and monitor systems for suspicious privilege escalation attempts.