CVE-2026-1669
Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references.
Vendor
Product
CWE
Yayın Tarihi
2026-02-11 23:16:03
Güncelleme
2026-02-26 23:23:59
Source Identifier
cve-coordination@google.com
KEV Date Added
-