Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-12480

Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the `H5IOStore._verify_dataset()` and `file_editor.py` methods, which fail to check the `dataset.is_virtual` property of HDF5 datasets. This allows an attacker to craft a malicious `.keras` model archive or `.h5` weights file containing a Virtual Dataset (VDS) that references external HDF5 files on the victim's filesystem. When the victi
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a325b6a7f45233439b8e68d3304aa22f35e84dc3340cb02e151897aec93d5b3c
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"keras-team/keras","vendor":"keras-team","versions":[{"lessThan":"3.12.2, 3.14.1","status":"affected","version":"unspecified","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c6e2d0e3a20ea0330acf65bfdf9d4db84cfb1986c45d22287b87976262bd9ccc · sha256:577a350ad46e9414… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","version":"3.0"},"metric_type":"cvssV3_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:c6e2d0e3a20ea0330acf65bfdf9d4db84cfb1986c45d22287b87976262bd9ccc · sha256:577a350ad46e9414… · /containers/cna/metrics/0/cvssV3_0

CWE assertions

1 source assertion
{"cweId":"CWE-73","description":"CWE-73 External Control of File Name or Path","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:c6e2d0e3a20ea0330acf65bfdf9d4db84cfb1986c45d22287b87976262bd9ccc · sha256:577a350ad46e9414… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"url":"https://github.com/keras-team/keras/commit/d5a88bdb137c0d3039b8f4bbbe8c7099925cc10c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c6e2d0e3a20ea0330acf65bfdf9d4db84cfb1986c45d22287b87976262bd9ccc · sha256:577a350ad46e9414… · /containers/cna/references/1
{"url":"https://huntr.com/bounties/1875d257-5b03-4a69-ac70-e98653fa12c7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c6e2d0e3a20ea0330acf65bfdf9d4db84cfb1986c45d22287b87976262bd9ccc · sha256:577a350ad46e9414… · /containers/cna/references/0
{"tags":["exploit"],"url":"https://huntr.com/bounties/1875d257-5b03-4a69-ac70-e98653fa12c7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c6e2d0e3a20ea0330acf65bfdf9d4db84cfb1986c45d22287b87976262bd9ccc · sha256:577a350ad46e9414… · /containers/adp/0/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer