8.6
High
CVE-2025-8747 A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an…
Description
A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Keras 3.0 | 3.0.0 → 3.10.0 | No fix stated |
References
- github.com github.com
- jfrog.com jfrog.com
Timeline
- Published
- Last modified
Other CVEs of Keras
The 4 CVEs of Keras →
CVE-2026-1669
Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all…
7.1
High
CVE-2026-0897
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0…
7.1
High
CVE-2025-1550
The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually…
7.3
High