CVE-2026-1669 in Keras
Zusammenfassung
von MITRE • 12.02.2026
Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.