CVE-2025-8747 | Vulnetix

CVE-2025-8747 PUBLISHED CVSS 8.800000190734863 HIGH

A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.

EPSS 0.12% · 1.6th percentile

Risk Scores

CVSS 3.1

8.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

0.12%

1.6th percentile

Affected Products

Vendor	Product	Versions
Google	Keras	3.0.0
keras	keras	3.0.0
PyPI	keras	3.0.0

Timeline

Aug 11, 2025 EPSS Score
Aug 11, 2025 CVE Published
Aug 11, 2025 PoC Published
Aug 11, 2025 PoC Published
Aug 19, 2025 EPSS Score
Aug 28, 2025 EPSS Score
Sep 5, 2025 EPSS Score
Sep 14, 2025 EPSS Score
Sep 22, 2025 EPSS Score
Oct 1, 2025 EPSS Score
Oct 9, 2025 EPSS Score
Oct 18, 2025 EPSS Score

References

https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability/ exploit
https://github.com/keras-team/keras/pull/21429 fix
https://github.com/keras-team/keras/security/advisories/GHSA-c9rc-mg46-23w3 url
https://nvd.nist.gov/vuln/detail/CVE-2025-8747 advisory
https://github.com/keras-team/keras package
https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability url
https://github.com/keras-team/keras/commit/713172ab56b864e59e2aa79b1a51b0e728bba858 fix

Open in Interactive Console →