CVEvulnerability

CVE-2025-49655

9.8 CRITICAL Published 2025-10-17 Modified 2026-10-19 Official page ↗
Status
Deferred
Published
2025-10-17
Last modified
2026-10-19
Assigner
6f8de1f0-f67e-45a6-b68f-98777fdb759c
CVSS 3.1 (6f8de1f0-f67e-45a6-b68f-98777fdb759c)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502

Description

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References