PT-2025-42617 · Google+1 · Keras+1

Published 2025-10-17 · Updated 2025-11-25 · CVE-2025-49655

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Keras versions 3.11.0 through 3.11.2

Description The Keras framework is susceptible to a critical security issue stemming from unsafe deserialization of untrusted data. Specifically, when loading Keras files containing a maliciously crafted TorchModuleWrapper class, an attacker can execute arbitrary code on a user’s system. This is possible even when safe mode is enabled. The issue can be triggered through both local and remote files.

Recommendations Versions 3.11.0 through 3.11.2 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-49655

GHSA-CVHH-Q5G5-QPRP

Affected Products

Debian

Keras

References · 30

• https://osv.dev/vulnerability/CVE-2025-49655 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-49655 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-49655 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-49655 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-49655 · Security Note
• https://osv.dev/vulnerability/GHSA-cvhh-q5g5-qprp · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-49655 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49655 · Security Note
• https://github.com/keras-team/keras · Note
• https://github.com/keras-team/keras/pull/21575 · Note
• https://twitter.com/ZeroPathLabs/status/1979230965311381697 · Twitter Post
• https://twitter.com/cracbot/status/1980952323724816576 · Twitter Post
• https://twitter.com/CveFindCom/status/1979210739937157341 · Twitter Post
• https://twitter.com/CVEnew/status/1979209220038996014 · Twitter Post
• https://twitter.com/0dayPublishing/status/1979210611943784746 · Twitter Post