7.3
Élevée
CVE-2025-1550 The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually…
Description
The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Keras 3.0 | 3.0.0 → < 3.8.0 | 3.8.0 |
Références
- github.com github.com
- towerofhanoi.it towerofhanoi.it
Chronologie
- Publiée
- Dernière modification
Autres CVE de Keras
Les 4 CVE de Keras →
CVE-2026-1669
Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all…
7.1
Élevée
CVE-2026-0897
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0…
7.1
Élevée
CVE-2025-8747
A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an…
8.6
Élevée