PT-2025-10719 · Keras+1 · Keras+1

Gabriele Digregorio + 1 · Publicado 2025-03-11 · Atualizado 2025-11-10 · CVE-2025-1550

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Keras versions 3.0.0 through 3.7.9

Description The Keras Model.load model function allows for arbitrary code execution, even when safe mode is enabled. This occurs through a maliciously crafted .keras archive. An attacker can modify the config.json file within the archive to specify arbitrary Python modules and functions, along with their arguments, which are then loaded and executed during model loading. The vulnerability stems from insufficient validation during model loading, specifically within the handling of the config.json file.

Recommendations Update to Keras version 3.9 or later. Only load models from trusted sources.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

AZL-58360

BDU:2025-02637

CVE-2025-1550

GHSA-48G7-3X6R-XFHP

GHSA-5478-V2W6-C6Q7

PYSEC-2025-122

Produtos afetados

Debian

Keras

Referências · 40

• 🔥 https://towerofhanoi.it/writeups/cve-2025-1550 · Exploit
• 🔥 https://exploit-db.com/exploits/52359 · Exploit
• https://github.com/keras-team/keras/pull/20751 · Correção
• https://github.com/keras-team/keras · Nota
• https://github.com/keras-team/keras/commit/e67ac8ffd0c883bec68eb65bb52340c7f9d3a903 · Nota
• https://github.com/keras-team/keras/releases/tag/v3.9.0 · Nota
• https://github.com/keras-team/keras/security/advisories/GHSA-48g7-3x6r-xfhp · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/keras/PYSEC-2025-122.yaml · Nota
• https://security-tracker.debian.org/tracker/CVE-2025-1550 · Aviso do Fabricante
• https://twitter.com/tbbhunter/status/1921505782400422160 · Publicação no Twitter
• https://twitter.com/grok/status/1956394793346720024 · Publicação no Twitter
• https://t.me/cvenotify/129841 · Publicação no Telegram
• https://t.me/thebugbountyhunter/9845 · Publicação no Telegram
• https://twitter.com/dailycve/status/1955356614409720302 · Publicação no Twitter
• https://ubuntu.com/security/CVE-2025-1550 · Aviso do Fabricante