PT-2025-38518 · Keras+1 · Keras+1

Gabriele Digregorio · Published 2025-09-19 · Updated 2025-09-19 · CVE-2025-9906

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:A

Name of the Vulnerable Software and Affected Versions Keras (affected versions not specified)

Description The Model.load model method is susceptible to arbitrary code execution, even when safe mode is enabled. A specially crafted .keras model archive containing a modified config.json file can trigger the execution of arbitrary code. The config.json file invokes keras.config.enable unsafe deserialization() to disable safe mode. Subsequently, a Lambda layer with arbitrary Python code, serialized using pickling, can be included within the same archive to achieve code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

AZL-67508

CVE-2025-9906

GHSA-36FQ-JGMW-4R9C

PYSEC-2025-76

Affected Products

Debian

Keras

References · 18

• https://github.com/keras-team/keras/pull/21429 · Patch
• https://osv.dev/vulnerability/CVE-2025-9906 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-9906 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-9906 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9906 · Security Note
• https://osv.dev/vulnerability/GHSA-36fq-jgmw-4r9c · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-9906 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-67508 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-9906 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-9906 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2025-76 · Vendor Advisory
• https://github.com/keras-team/keras · Note
• https://github.com/keras-team/keras/releases/tag/v3.11.0 · Note
• https://github.com/keras-team/keras/commit/713172ab56b864e59e2aa79b1a51b0e728bba858 · Note
• https://twitter.com/CveFindCom/status/1968958172963463554 · Twitter Post