Arbitrary Code Execution (ACE)

🗓️ 17 Mar 2025 04:51:21Reported by Veracode Vulnerability DatabaseType

Vulnerability in Keras allows Arbitrary Code Execution through insecure deserialization in model loading.

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses keras-2.14.0-py3-none-any.whl which is vulnerable to CVE-2025-1550.	5 Jan 202606:15	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Watson NLP affects IBM Robotic Process Automation which may result in arbitrary code execution (CVE-2025-1550).	16 Jan 202614:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Watson Studio in Cloud Pak for Data.	5 Dec 202508:46	–	ibm
IBM Security Bulletins	Security Bulletin: Arbitrary Code Execution in Keras	19 Dec 202515:10	–	ibm
Tenable Nessus	Azure Linux 3.0 Security Update: keras (CVE-2025-1550)	22 Jan 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-1550	2 Sep 202500:00	–	nessus
CBLMariner	CVE-2025-1550 affecting package keras for versions less than 3.3.3-2	18 Mar 202521:13	–	cbl_mariner
Chainguard	CVE-2025-1550 vulnerabilities	14 Mar 202516:12	–	cgr
Circl	CVE-2025-1550	11 Mar 202508:38	–	circl
CNNVD	Keras 代码注入漏洞	11 Mar 202500:00	–	cnnvd

Vulners

Node

keras kerasRange3.0.0–3.8.0python

keras kerasMatch3.0.0python

keras kerasMatch3.0.1python

keras kerasMatch3.0.2python

keras kerasMatch3.0.3python

keras kerasMatch3.0.4python

keras kerasMatch3.0.5python

keras kerasMatch3.1.0python

keras kerasMatch3.1.1python

keras kerasMatch3.2.0python

keras kerasMatch3.2.1python

keras kerasMatch3.3.0python

keras kerasMatch3.3.1python

keras kerasMatch3.3.2python

keras kerasMatch3.3.3python

keras kerasMatch3.4.0python

keras kerasMatch3.4.1python

keras kerasMatch3.5.0python

keras kerasMatch3.6.0python

keras kerasMatch3.7.0python

Source	Link
github	www.github.com/keras-team/keras/releases/tag/v3.9.0
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-1550
github	www.github.com/keras-team/keras/security/advisories/GHSA-48g7-3x6r-xfhp
github	www.github.com/keras-team/keras/pull/20751
github	www.github.com/keras-team/keras/commit/e67ac8ffd0c883bec68eb65bb52340c7f9d3a903
github	www.github.com/keras-team/keras

13 Dec 2025 07:12Current

7.1High risk

Vulners AI Score7.1

CVSS 3.19.8

CVSS 47.3

EPSS0.07973

SSVC