CVE-2025-1550

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-1550
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1550.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-1550
Aliases
Downstream
Related
Published
2025-03-11T08:12:34Z
Modified
2026-08-12T03:51:22Z
Severity
  • 7.3 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSS Calculator
Summary
Arbitrary Code Execution via Crafted Keras Config for Model Loading
Details

The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.

Database specific 
{
    "cna_assigner": "Google",
    "cwe_ids": [
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1550.json"
}
References

Affected packages

Git / github.com/keras-team/keras

Affected ranges

Type
GIT
Repo
https://github.com/keras-team/keras
Events
Introduced
9c675a9a45e5e8244163fea82efc6066722608a1
Fixed
fbf0af76130beecae2273a513242255826b42c04
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:keras:keras:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.0.0"
        },
        {
            "fixed": "3.8.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.0.4
v3.0.5
v3.1.0
v3.1.1
v3.2.0
v3.2.1
v3.3.0
v3.3.1
v3.3.2
v3.3.3
v3.4.0
v3.4.1
v3.5.0
v3.6.0
v3.7.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1550.json"