CVE-2025-8747 Information

Aug 12, 2025 cve

Description

A safe mode bypass vulnerability in the Model.load_model method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted .keras model archive.

Reference

https://github.com/keras-team/keras/pull/21429 https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability/ https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability/

CNNVD-202508-916 (Published: 2025-08-11)

Share on: