CVE-2025-8747CWE-502

Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.

High · published August 11, 2025

CVSS v4.0
8.6
EPSS
0%
Percentile
1.6
In the wild
Unconfirmed
What it is

A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:A
EPSS
0.00118 · 1.6th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-08-11T07:21Z
EPSS history
Timeline
  • 11 AUG 07:21Z
    Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.
    cvelistv5