https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:35:59.294803+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07909 bdu:2026-07909 2026-10-05T17:35:59.750212+00:00 bdu:2026-07909 https://cve.radiocsirt.org/vuln/euvd-2026-272467 EUVD-2026-272467 2026-10-05T17:35:59.750256+00:00 EUVD-2026-272467 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8747 fkie_cve-2025-8747 2026-10-05T17:35:59.750271+00:00

A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.

 https://cve.radiocsirt.org/vuln/ghsa-c9rc-mg46-23w3 GHSA-c9rc-mg46-23w3 — Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality 2026-10-05T17:35:59.750301+00:00

Affected: PyPI: keras

### Summary It is possible to bypass the mitigation introduced in response to [CVE-2025-1550](https://github.com/keras-team/keras/security/advisories/GHSA-48g7-3x6r-xfhp), when an untrusted Keras v3 model is loaded, even when “safe_mode” is enabled, by crafting malicious arguments to built-in Keras modules.

The vulnerability is exploitable on the default configuration and does not depend on user input (just requires an untrusted model to be loaded).

### Impact

| Type | Vector |Impact| | -------- | ------- | ------- | |Unsafe deserialization |Client-Side (when loading untrusted model)|Arbitrary file overwrite. Can lead to Arbitrary code execution in many cases.|

### Details

Keras’ [safe_mode](https://www.tensorflow.org/api_docs/python/tf/keras/models/load_model) flag is designed to disallow unsafe lambda deserialization - specifically by rejecting any arbitrary embedded Python code, marked by the “__lambda__” class name. https://github.com/keras-team/keras/blob/v3.8.0/keras/src/saving/serialization_lib.py#L641 -

``` if config["class_name"] == "__lambda__": if safe_mode: raise ValueError( "Requested the deserialization of a `lambda` object. " "This carries a potential risk of arbitrary code execution " "and thus it is disallowed by default. If you trust the " "source of the saved model, you can pass `safe_mode=False` to " "the loading function in order to allow `lambd…

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-8747 msrc_CVE-2025-8747 — Keras safe_mode bypass allows arbitrary code execution when loading a malicious model. 2026-10-05T17:35:59.750362+00:00 msrc_CVE-2025-8747 https://cve.radiocsirt.org/vuln/pysec-2025-75 PYSEC-2025-75 2026-10-05T17:35:59.750382+00:00

Affected: PyPI: keras

A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-8747 UBUNTU-CVE-2025-8747 2026-10-05T17:35:59.750401+00:00

Affected: Ubuntu:18.04:LTS: keras, Ubuntu:20.04:LTS: keras

A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.