VDB
CVE-2026-1669
CVE-2026-1669
PUBLISHED
CVSS 7.1 HIGH
Arbitrary File Read in Keras via HDF5 External Datasets
Reported by google · Published February 11, 2026
keras is fixed in 3.13.2, 3.13.1 and 3.12.1 (PyPI)
Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| keras | PyPI | 3.13.2, 3.13.1, 3.12.1 |
| tensorflow-gpu-jupyter | Chainguard | 2.20.0-r10 |
| tensorflow-cpu-jupyter | Wolfi | 2.20.0-r11 |
| tensorflow-cpu-jupyter | Chainguard | 2.20.0-r11 |
| keras | keras | 3.13.1 |
| Keras | 3.13.1 |
Risk scores
CVSS 4.0
7.1
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Keras | 3.0.0 | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Keras | 3.0.0 | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) |
Timeline
- Feb 11, 2026 CVE Published
- Feb 12, 2026 EPSS Score (30 in total, the first dated here)
- Feb 18, 2026 PoC Published (3 in total, the first dated here)
- Mar 9, 2026 Security Advisory
- Mar 25, 2026 Coalition ESS Score (2 in total, the first dated here)
- Jul 15, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2026-1669
vulnetix vdb fixes CVE-2026-1669Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-1669/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart