CVE-2020-26269: TensorFlow - Out-of-Bounds Access in Filesystem Path Matching
Summary
CVE-2020-26269: In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories. Affects tensorflow across 2 version ranges.
>= 2.4.0rc0, < 2.4.0
< 8b5b9dc96666a3a5d27fad7179ff215e3b74b67c
Fixed in 8b5b9dc96666a3a5d27fad7179ff215e3b74b67c. How to fix ↓
Also tracked for
- tensorflow · Bitnami
- tensorflow-cpu · PyPI
- tensorflow-gpu · PyPI
The same CVE-2020-26269 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TensorFlow is an open-source machine learning framework widely used for building and training various deep learning models. It provides a comprehensive ecosystem of tools, libraries, and resources for developing artificial intelligence applications. TensorFlow supports multiple programming languages and platforms, making it highly versatile and accessible to developers worldwide. However, in certain versions of TensorFlow, there is a vulnerability that allows for out-of-bounds access in the matching of filesystem paths to globbing patterns.
Vulnerability Detail
The vulnerability in TensorFlow (versions 2.4.0rc*) lies in the implementation of matching filesystem paths to globbing patterns. The parallel implementation of GetMatchingPaths assumes certain invariants and preconditions that are not verified, leading to an access out of bounds of the array holding the directories. This vulnerability can be exploited by an attacker to potentially execute arbitrary code or cause a denial of service. The issue has been patched in TensorFlow version 2.4.0, and it only affects the master branch and release candidates for version 2.4.0.
How To Fix
Latest published version: 2.21.0 as of 22 Oct 2026
pip install --upgrade "tensorflow==2.21.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
8b5b9dc96666a3a5d27fad7179ff215e3b74b67c
This is the first release that contains the fix.
pip install --upgrade "tensorflow==8b5b9dc96666a3a5d27fad7179ff215e3b74b67c"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is crucial to update to the patched version of TensorFlow to ensure the security of your application.
Conclusion
The vulnerability in TensorFlow's filesystem path matching can have serious security implications. It is crucial to update to the patched version (2.4.0 or later) to mitigate the risk of exploitation. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for tensorflow →
FAQ
TensorFlow is an open-source machine learning framework used for building and training deep learning models.
The vulnerability allows for out-of-bounds access in filesystem path matching, which can potentially lead to arbitrary code execution or denial of service.
The vulnerability affects TensorFlow release candidate versions 2.4.0rc* and the master branch. It has been patched in version 2.4.0.
To fix the vulnerability, update TensorFlow to version 2.4.0 or later using the command 'pip install --upgrade tensorflow'.
No, there is no specific workaround available. Updating to the patched version is the recommended solution.
References
Related vulnerabilities
Recent vulnerabilities recorded for tensorflow.
