CriticalVulnerability
CVE-2024-3660: TensorFlow Keras arbitrary code injection through crafted models
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2024-3660
- Published
- Record updated
- Affected
- keras < 2.13.1rc0
- Fixed in
- 2.13.1rc0
- released May 2, 2023, 351 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 1.7%
Summary
CVE-2024-3660 is an arbitrary code injection flaw in TensorFlow's Keras framework, versions below 2.13, classified as CWE-94. An attacker who supplies a crafted model can run arbitrary code with the same permissions as the application that loads it. NIST had not yet provided an assessment at the time of the source.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- kerasPyPINo LLM dependency detected · 6 tracked dependents
Related items
- MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSame vendor · NVD/CVE Database
- HighCVE-2026-117560: ATXP Gemini CLI extension OS command injection in runAtxp() via MCP parametersSame vendor · NVD/CVE Database
- CriticalCVE-2026-90970: GitLab AI Gateway prompt template sandbox escape via crafted flow configurationSame vendor · NVD/CVE Database
- MediumCVE-2026-89278: GPTranslate WordPress plugin exposes plaintext API key to unauthenticated usersSame vendor · NVD/CVE Database
- CriticalCVE-2026-19407: Google Cloud Gemini Enterprise Agent Platform SDK for Python bucket squattingSame vendor · NVD/CVE Database