PT-2025-10719 · Keras+1 · Keras+1

Gabriele Digregorio + 1 · Published 2025-03-11 · Updated 2025-11-10 · CVE-2025-1550

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Keras versions 3.0.0 through 3.7.9

Description The Keras Model.load model function allows for arbitrary code execution, even when safe mode is enabled. This occurs through a maliciously crafted .keras archive. An attacker can modify the config.json file within the archive to specify arbitrary Python modules and functions, along with their arguments, which are then loaded and executed during model loading. The vulnerability stems from insufficient validation during model loading, specifically within the handling of the config.json file.

Recommendations Update to Keras version 3.9 or later. Only load models from trusted sources.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

AZL-58360

BDU:2025-02637

CVE-2025-1550

GHSA-48G7-3X6R-XFHP

GHSA-5478-V2W6-C6Q7

PYSEC-2025-122

Affected Products

Debian

Keras

References · 39

• 🔥 https://exploit-db.com/exploits/52359 · Exploit
• 🔥 https://towerofhanoi.it/writeups/cve-2025-1550 · Exploit
• https://github.com/keras-team/keras/pull/20751 · Patch
• https://osv.dev/vulnerability/GHSA-5478-v2w6-c6q7 · Vendor Advisory
• https://cve.org/cverecord?id=CVE-2025-1550 · Security Note
• https://osv.dev/vulnerability/GHSA-48g7-3x6r-xfhp · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-1550 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-58360 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-1550 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-1550 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1550 · Security Note
• https://bdu.fstec.ru/vul/2025-02637 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1550 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-1550 · Security Note
• https://osv.dev/vulnerability/PYSEC-2025-122 · Vendor Advisory