CVE-2025-1550: google keras Code Injection
Vulnerability summary
CVE-2025-1550 is a critical (CVSS 9.8) Code Injection vulnerability in google keras. EPSS estimates a 2.63% chance of exploitation in the next 30 days, higher than 85.2% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 0 · Related 2Timeline
- 11-03-2025PublishedVulnerability first disclosed.
- 24-07-2025Last modifiedVulnerability information updated.
Description
The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.
CVSS metrics
8 scores · 6 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.3HighCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- OSV · WolfiEcosystem advisory · calculated7.3HighCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- OSV · ChainguardEcosystem advisory · calculated7.3HighCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- NVDNIST7.3HighCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- OSV · PypiEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
2.63%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.63% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (towerofhanoi.it)
Maturity: unknown
Keras 2.15 - Remote Code Execution (RCE)
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Chainguard1 product
- kubeflow-pipelines-visualization-server< 2.4.1-r2
Google1 product
- keras≥ 3.0.0, < 3.8.0
Keras1 product
- keras≥ 3.0.0, < 3.8.0
PyPI1 product
- keras≥ 3.0.0, < 3.9.0 | ≥ 3.0.0, < 3.8.0
Ubuntu1 product
- kerasAll versions (No fix recorded)
Wolfi1 product
- kubeflow-pipelines-visualization-server< 2.4.1-r2
6 vendors · 6 products
References
14 links
- github.com/keras-team/kerasPACKAGE
Show all 14 references
- pypi.org/project/kerasPACKAGE