CVE-2026-1669

⚠️ high

Summary

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references.

CVSS Score

7.5

High

EPSS Score

0.3

Exploit Probability

Published Date

2026-02-11

First Seen: 2026-02-12

📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 68.7% of all 338,292 vulnerabilities in our database.

#105,741

Above average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: Feb 12, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

Requires human interaction

💥 Technical Impact

Partial

Limited system impact

🏆 Discovered By

Giuseppe Massaro (https://github.com/N3mes1s)

SSVC data provided by CISA

Last Modified 2026-07-15

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS Vector 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE IDs (Weakness Types)

CWE-73 CWE-200

📦 Affected Products 1

Vendor	Product	Status	Affected Versions
keras	keras	Affected	> 3.0.0 < 3.13.1

🔗 References 4

https://github.com/google/security-research/security...

Third Party Advisory

https://access.redhat.com/security/cve/CVE-2026-1669

https://bugzilla.redhat.com/show_bug.cgi?id=2439205

https://security.access.redhat.com/data/csaf/v2/vex/...

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-12481	⛔ critical	9.8	0.4	A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deser...	2026-07-03
CVE-2026-11816	⚠️ high	8.1	0.6	Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `...	2026-06-11
CVE-2026-1462	⚠️ high	7.8	0.4	A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow S...	2026-04-13
CVE-2026-0897	⚠️ high	7.5	0.3	Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 throu...	2026-01-15
CVE-2025-12060	🔶 medium	-	0.1	The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path ...	2025-10-30
CVE-2025-12058	🔶 medium	-	0.1	The Keras.Model.load_model method, including when executed with the intended security mitigation safe_mode=True, is vuln...	2025-10-29

These CVEs affect the same products