{"data":{"id":"2d3ecbc5-66c0-425a-9870-3b859e913c88","title":"CVE-2025-8747: A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an…","summary":"CVE-2025-8747 is a safe mode bypass in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0. An attacker who convinces a user to load a specially crafted `.keras` model archive can achieve arbitrary code execution. Google Inc. is the CNA, rating it CVSS-B 8.6 HIGH under CVSS 4.0, with CWE-502 (Deserialization of Untrusted Data).","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-8747","publishedAt":"2025-08-11T12:15:26.507Z","cveId":"CVE-2025-8747","cweIds":["CWE-502"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["keras@>= 3.0.0, < 3.11.0 (fixed: 3.11.0)"],"affectedPackageNames":["keras"],"affectedPackageRefs":["pypi:keras"],"affectedVendors":["Google"],"affectedVendorsRaw":["Keras"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Keras safe mode bypass in Model.load_model via crafted .keras archive","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00125,"epssCheckedAt":"2026-11-04T06:10:13.536Z","kevDateAdded":null,"advisoryAliases":["GHSA-c9rc-mg46-23w3"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:52:58.009Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-07-30T00:00:01.105Z","daysToFix":-12,"fixCheckedAt":"2026-10-29T21:43:56.570Z","capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"keras","fixedVersion":"3.11.0","matchedVersion":"3.11.0","fixReleasedAt":"2025-07-30T00:00:01.105Z","daysToFix":-12,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:43:56.417Z"}]}}