{"data":{"id":"c27c4d08-fa0b-4c56-8a7b-de342a4cced0","title":"CVE-2026-1669: Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all…","summary":"CVE-2026-1669 is an arbitrary file read flaw in the model loading mechanism (HDF5 integration) of Keras versions 3.0.0 through 3.13.1 on all supported platforms. A remote attacker can use a crafted .keras model file with HDF5 external dataset references to read local files and disclose sensitive information. Google Inc. rated it CVSS 4.0 7.1 (High), with network attack vector, no privileges required, and user interaction required.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-1669","publishedAt":"2026-02-11T23:16:03.750Z","cveId":"CVE-2026-1669","cweIds":["CWE-73","CWE-200"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":["keras@>= 3.13.0, < 3.13.2 (fixed: 3.13.2)","keras@>= 3.0.0, < 3.12.1 (fixed: 3.12.1)"],"affectedPackageNames":["keras"],"affectedPackageRefs":["pypi:keras"],"affectedVendors":["Google"],"affectedVendorsRaw":["Keras"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Keras arbitrary file read in model loading via HDF5 integration","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00334,"epssCheckedAt":"2026-11-04T18:09:12.971Z","kevDateAdded":null,"advisoryAliases":["GHSA-3m4q-jmj6-r34q"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:52.217Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-01-30T00:35:09.664Z","daysToFix":-12,"fixCheckedAt":"2026-10-29T21:41:39.519Z","capecIds":["CAPEC-116"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"keras","fixedVersion":"3.12.1","matchedVersion":"3.12.1","fixReleasedAt":"2026-01-30T18:28:54.383Z","daysToFix":-12,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:41:39.368Z"},{"ecosystem":"pypi","name":"keras","fixedVersion":"3.13.2","matchedVersion":"3.13.2","fixReleasedAt":"2026-01-30T00:35:09.664Z","daysToFix":-12,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:41:39.368Z"}]}}