SB2026040794 - Local file disclosure in Keras

Description

This security bulletin contains information about 1 security vulnerability.

1) External Control of File Name or Path (CVE-ID: CVE-2026-1669)

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to external control of file name or path in the Keras HDF5 weight loading functionality when processing an attacker-supplied HDF5 weights file or .keras archive. A remote attacker can supply a specially crafted weights file with HDF5 external storage or external links to disclose sensitive information.

User interaction is required to load the malicious weights file or model archive, and the target file must be readable by the process.

Remediation

Install update from vendor's website.

References

• https://github.com/keras-team/keras/security/advisories/GHSA-3m4q-jmj6-r34q
• https://github.com/advisories/GHSA-3m4q-jmj6-r34q