{"data":{"id":"ecfb1588-08bf-4318-a066-f3d4ae36b664","title":"CVE-2026-9335: A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to…","summary":"CVE-2026-9335 affects keras-team/keras versions <= 3.14.0. The KerasFileEditor and keras.saving.load_weights functions bypass the safe_get_h5_group and safe_get_h5_dataset helpers, so HDF5 ExternalLinks are automatically dereferenced. An attacker can supply a malicious .h5, .weights.h5, or .keras file with ExternalLinks to disclose sensitive data from the victim's local filesystem.","solution":"N/A -- no mitigation discussed in source.","labels":["security","privacy"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-9335","publishedAt":"2026-08-02T05:16:20.827Z","cveId":"CVE-2026-9335","cweIds":["CWE-22"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":["keras@< 3.12.3 (fixed: 3.12.3)","keras@>= 3.13.0, < 3.15.0 (fixed: 3.15.0)"],"affectedPackageNames":["keras"],"affectedPackageRefs":["pypi:keras"],"affectedVendors":[],"affectedVendorsRaw":["Keras","KerasFileEditor","keras.saving.load_weights"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"keras-team/keras local HDF5 file disclosure through ExternalLinks","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00767,"epssCheckedAt":"2026-11-04T00:12:27.299Z","kevDateAdded":null,"advisoryAliases":["GHSA-m8wh-29wm-52mv"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:46:04.773Z","patchAvailable":true,"disclosureDate":"2026-08-02T05:16:20.827Z","fixReleasedAt":"2026-06-24T23:17:10.808Z","daysToFix":-39,"fixCheckedAt":"2026-10-29T21:32:28.465Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"keras","fixedVersion":"3.12.3","matchedVersion":"3.12.3","fixReleasedAt":"2026-06-26T17:29:01.940Z","daysToFix":-37,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:28.318Z"},{"ecosystem":"pypi","name":"keras","fixedVersion":"3.15.0","matchedVersion":"3.15.0","fixReleasedAt":"2026-06-24T23:17:10.808Z","daysToFix":-39,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:28.318Z"}]}}