CVE-2026-9335

{
  "id": "CVE-2026-9335",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-02T05:16:20.827",
  "lastModified": "2026-10-23T22:10:00.160",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The `KerasFileEditor` and `keras.saving.load_weights` functions bypass the `safe_get_h5_group` and `safe_get_h5_dataset` helpers, which are designed to reject ExternalLinks and SoftLinks. This results in automatic dereferencing of links to external HDF5 files, enabling attackers to disclose sensitive data from the victim's local filesystem. Specifically, `KerasFileEditor` extracts attributes and datasets from linked files into its internal structures, while `keras.saving.load_weights` loads weights from linked files into the user's model. This issue can be exploited by providing a malicious `.h5`, `.weights.h5`, or `.keras` file containing ExternalLinks."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en las versiones menor o igual que 3.14.0 de keras-team/keras permite la divulgación arbitraria de contenido de archivos HDF5 locales debido a un manejo inadecuado de los ExternalLinks de HDF5. Las funciones ’KerasFileEditor’ y ’keras.saving.load_weights’ omiten los ayudantes ’safe_get_h5_group’ y ’safe_get_h5_dataset’, que están diseñados para rechazar ExternalLinks y SoftLinks. Esto resulta en la desreferenciación automática de enlaces a archivos HDF5 externos, permitiendo a los atacantes divulgar datos sensibles del sistema de archivos local de la víctima. Específicamente, ’KerasFileEditor’ extrae atributos y conjuntos de datos de archivos enlazados a sus estructuras internas, mientras que ’keras.saving.load_weights’ carga pesos de archivos enlazados en el modelo del usuario. Este problema puede ser explotado al proporcionar un archivo malicioso ’.h5’, ’.weights.h5’ o ’.keras’ que contenga ExternalLinks."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "keras-team",
          "product": "keras-team/keras",
          "versions": [
            {
              "version": "unspecified",
              "lessThan": "3.12.3, 3.15.0",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV30": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.0",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-03T16:48:07.910437Z",
          "id": "CVE-2026-9335",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/keras-team/keras/commit/23370f16b0ab9a200f7550a34e54a3ceab74ba0e",
      "source": "[email protected]"
    },
    {
      "url": "https://huntr.com/bounties/876a7226-5428-4a66-9d05-232461120db5",
      "source": "[email protected]"
    }
  ]
}