Allocation of Resources Without Limits or Throttling in Keras - CVE-2026-0897
Published: November 9, 2026
Vulnerability identifier: #VU162899
CSH Severity: Medium
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-0897
CWE-ID: CWE-770
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to cause memory exhaustion and denial of service in environments processing untrusted Keras models.
The vulnerability exists due to unrestricted memory allocation from unvalidated HDF5 dataset dimensions when KerasFileEditor loads a crafted .keras archive. An unauthenticated remote attacker can supply a small model file declaring enormous dataset dimensions and persuade a victim to open it, triggering a petabyte-scale allocation attempt that crashes the process.
Affected software
Keras
How to mitigate CVE-2026-0897
Install security update from vendor's website.
Keras - addressed in versions 3.12.1, 3.13.0