{"data":{"id":"6fd9b59f-f2e8-4895-8bbc-6c6201b848bf","title":"CVE-2025-1550: The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually…","summary":"CVE-2025-1550 affects the Keras Model.load_model function. A manually constructed, malicious .keras archive can alter its config.json file to name arbitrary Python modules and functions, with their arguments, which are then loaded and executed during model loading, even when safe_mode=True. Google Inc. is the CNA, rating it CVSS 4.0 7.3 HIGH.","solution":"The source links a patch at https://github.com/keras-team/keras/pull/20751 but does not state a fixed version or configuration workaround in the text.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-1550","publishedAt":"2025-03-11T13:15:25.217Z","cveId":"CVE-2025-1550","cweIds":["CWE-94"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["keras@>= 3.0.0, < 3.9.0 (fixed: 3.9.0)"],"affectedPackageNames":["keras"],"affectedPackageRefs":["pypi:keras"],"affectedVendors":["Google"],"affectedVendorsRaw":["Keras"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Keras Model.load_model arbitrary code execution via malicious .keras archive","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.02626,"epssCheckedAt":"2026-11-04T06:10:15.975Z","kevDateAdded":null,"advisoryAliases":["GHSA-48g7-3x6r-xfhp"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:29.271Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-03-04T23:22:11.172Z","daysToFix":-7,"fixCheckedAt":"2026-10-29T21:45:04.660Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"keras","fixedVersion":"3.9.0","matchedVersion":"3.9.0","fixReleasedAt":"2025-03-04T23:22:11.172Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:45:04.507Z"}]}}