Description (CNA)
A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Google / Keras | affected 3.0.0 through 3.10.0 |
CWE
CWE-502
References
- https://github.com/keras-team/keras/pull/21429
- https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability/
ADP enrichment
No English description supplied.