CVE-2025-8747 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution…
High CVSS: 8.6

CVE-2025-8747

A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.
Vendor
Keras
Product
Keras
CWE
CWE-502
Yayın Tarihi
2025-08-11 08:15:26
Güncelleme
2025-08-14 16:24:41
Source Identifier
cve-coordination@google.com
KEV Date Added
-

Kategoriler

CWE-502 Keras HIGH Keras 2025

Referanslar

https://github.com/keras-team/keras/pull/21429 https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability/ https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability/