EDB-52359

PoC

Keras 2.15 - Remote Code Execution (RCE)

view exploit source exploit_dbtype remoteauthor Mohammed Idrees Banyamerpublished 2025-07-16catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-1550UScritical9.8Exploit
The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.jso…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan