CVE-2026-1669

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-1669
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-1669.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-1669
Aliases
Downstream
Related
Published
2026-02-11T22:10:10.031Z
Modified
2026-07-16T03:30:50.398394336Z
Severity
  • 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Arbitrary File Read in Keras via HDF5 External Datasets
Details

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references.

Database specific 
{
    "cna_assigner": "Google",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.0.0"
                },
                {
                    "fixed": "3.13.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        },
        {
            "extracted_events": [
                {
                    "introduced": "3.0.0"
                },
                {
                    "fixed": "3.13.1"
                }
            ],
            "source": "DESCRIPTION"
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/1xxx/CVE-2026-1669.json",
    "cwe_ids": [
        "CWE-200",
        "CWE-73"
    ]
}
References

Affected packages

Git / github.com/keras-team/keras

Affected ranges

Type
GIT
Repo
https://github.com/keras-team/keras
Events
Introduced
9c675a9a45e5e8244163fea82efc6066722608a1
Last affected
8914427b7fa9d90f3c476cb2ee65d55d4f808e65
Database specific 
{
    "cpe": "cpe:2.3:a:keras:keras:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.0.0"
        },
        {
            "last_affected": "3.13.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.0.4
v3.0.5
v3.1.0
v3.1.1
v3.10.0
v3.11.0
v3.12.0
v3.13.0
v3.13.1
v3.2.0
v3.2.1
v3.3.0
v3.3.1
v3.3.2
v3.3.3
v3.4.0
v3.4.1
v3.5.0
v3.6.0
v3.7.0
v3.8.0
v3.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-1669.json"