Code Injection in Keras - CVE-2025-1550

Vulnerability identifier: #VU106013

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-1550

CWE-ID: CWE-94

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation in the "Model.load_model" function. A local user can execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Keras
IBM Watson Machine Learning on CP4D
IBM Robotic Process Automation
Maximo Application Suite - Monitor Component
Robotic Process Automation for Cloud Pak
Watson Studio on Cloud Pak for Data

Install updates from vendor's website.

Keras - update to 3.9.0
Maximo Application Suite - Monitor Component - addressed in versions 8.10.26, 8.11.24, 9.0.16, 9.1.6
Robotic Process Automation for Cloud Pak - addressed in versions 23.0.20.5, 30.0.1
IBM Robotic Process Automation - addressed in versions 23.0.20.5, 30.0.1
Watson Studio on Cloud Pak for Data - update to 5.2.2

• https://github.com/keras-team/keras/pull/20751

• Code execution in Keras
• Multiple vulnerabilities in IBM Watson Machine Learning on CP4D
• IBM Maximo Application Suite - Monitor Component update for keras-2.14.0-py3-none-any.whl
• IBM Robotic Process Automation update for Watson NLP
• Multiple vulnerabilities in IBM Watson Studio on Cloud Pak for Data