Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2026-9335 A vulnerability in keras-team/keras…

Description

A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The `KerasFileEditor` and `keras.saving.load_weights` functions bypass the `safe_get_h5_group` and `safe_get_h5_dataset` helpers, which are designed to reject ExternalLinks and SoftLinks. This results in automatic dereferencing of links to external HDF5 files, enabling attackers to disclose sensitive data from the victim's local filesystem. Specifically, `KerasFileEditor` extracts attributes and datasets from linked files into its internal structures, while `keras.saving.load_weights` loads weights from linked files into the user's model. This issue can be exploited by providing a malicious `.h5`, `.weights.h5`, or `.keras` file containing ExternalLinks.

Produits et versions touchés

Produit Versions touchées Corrigé en
keras-team/keras Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de keras-team/keras

Les 10 CVE de keras-team/keras →
CVE-2026-12570 A vulnerability in keras-team/keras… 5.5 Moyenne CVE-2026-12484 A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle… 7.8 Élevée CVE-2026-12482 A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the… 3.1 Faible CVE-2026-12481 A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of… 8.8 Élevée
Suivre cette CVE