Arbitrary Local File Disclosure Vulnerability in Keras by keras-team

CVE-2026-9335

What is CVE-2026-9335?

A vulnerability in Keras versions up to 3.14.0 allows attackers to disclose sensitive data from a victim's local filesystem. This occurs due to improper handling of HDF5 ExternalLinks within the KerasFileEditor and keras.saving.load_weights functions, which bypass security checks meant to prevent exposure of external links. Attackers can exploit this by providing malicious HDF5 files with ExternalLinks, enabling the automatic dereferencing of these links and the extraction of sensitive attributes and datasets. Proper security measures should be implemented to mitigate this risk.

References