CVE-2025-1550

HIGH EPSS 84.7%
Published Mar 11, 20251y ago · Modified Jun 17, 20262w ago
7.3 CVSS 4.0
High
Find Similar
Published Mar 11, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.

CVSS Details

Base Score
7.3
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction A
Scope X

Threat Intelligence

EPSS Exploit Probability
84.7% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-94 Improper Control of Generation of Code (Code Injection) Injection

Affected Products 1

VendorProductVersionRange
keraskeras*≥3.0.0  –  <3.8.0

References 2

  • github.com https://github.com/keras-team/keras/pull/20751
    Issue TrackingPatch
  • towerofhanoi.it https://towerofhanoi.it/writeups/cve-2025-1550/
    ExploitThird Party Advisory

Remediation

  • github.com https://github.com/keras-team/keras/pull/20751
    Issue TrackingPatch