PT-2026-3014 · Google · Keras

Sarvesh Patil · Published 2026-01-15 · Updated 2026-05-06 · CVE-2026-0897

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Keras versions 3.0.0 through 3.13.0

Description A flaw exists in the HDF5 weight loading component of Keras that allows for a denial of service. An attacker can provide a crafted .keras archive containing a valid model.weights.h5 file. This file declares an extremely large shape, leading to memory exhaustion and a crash of the Python interpreter. The issue affects all platforms.

Recommendations Update Keras to a version newer than 3.13.0.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

AZL-74631

CVE-2026-0897

GHSA-MGX6-5CF9-RR43

GHSA-XFHX-R7WW-5995

PYSEC-2026-73

Affected Products

Keras

References · 18

• https://github.com/keras-team/keras/pull/21880 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-0897 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-73 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0897 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-0897 · Security Note
• https://ubuntu.com/security/CVE-2026-0897 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-0897 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-74631 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-0897 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-0897 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xfhx-r7ww-5995 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mgx6-5cf9-rr43 · Vendor Advisory
• https://github.com/keras-team/keras · Note
• https://github.com/keras-team/keras/commit/f704c887bf459b42769bfc8a9182f838009afddb · Note
• https://github.com/keras-team/keras/commit/7360d4f0d764fbb1fa9c6408fe53da41974dd4f6 · Note