{"data":{"id":"1327d022-e830-4f47-b3d1-471247239bd9","title":"CVE-2025-49655: Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not…","summary":"CVE-2025-49655 affects the Keras framework in versions 3.11.0 up to but not including 3.11.3. A maliciously uploaded Keras file containing a TorchModuleWrapper class can run arbitrary code on an end user's system when loaded, even with safe mode enabled. The flaw (CWE-502) can be triggered through both local and remote files.","solution":"Fixed in 3.11.3 (upgrade Keras to version 3.11.3 or later). Reference: https://github.com/keras-team/keras/pull/21575","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-49655","publishedAt":"2025-10-17T20:15:37.420Z","cveId":"CVE-2025-49655","cweIds":["CWE-502"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["keras@>= 3.11.0, < 3.11.3 (fixed: 3.11.3)"],"affectedPackageNames":["keras"],"affectedPackageRefs":["pypi:keras"],"affectedVendors":[],"affectedVendorsRaw":["Keras"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Keras deserialization flaw allows code execution via malicious files","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0075,"epssCheckedAt":"2026-11-04T18:09:14.312Z","kevDateAdded":null,"advisoryAliases":["GHSA-cvhh-q5g5-qprp"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:52:16.069Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-08-21T22:08:55.858Z","daysToFix":-57,"fixCheckedAt":"2026-10-29T21:43:24.798Z","capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"keras","fixedVersion":"3.11.3","matchedVersion":"3.11.3","fixReleasedAt":"2025-08-21T22:08:55.858Z","daysToFix":-57,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:43:24.647Z"}]}}