CVE-2026-1669

HIGH

Keras <3.13.1 - Info Disclosure

Title source: llm

Description

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references.

References (1)

[Various Sources] https://github.com/google/security-research/security/advisories

Scores

CVSS v3 7.5

EPSS 0.0001

EPSS Percentile 1.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-200 CWE-73

Status published

Affected Products (2)

pypi/keras PyPI

keras/keras < 3.13.1

Timeline

Published Feb 11, 2026

Tracked Since Feb 18, 2026