The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.

The version of keras installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1550 advisory.

  - The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a     manually constructed, malicious .keras archive. By altering the config.json file within the archive, an     attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and     executed during model loading. (CVE-2025-1550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a     manually constructed, malicious .keras archive. By altering the config.json file within the archive, an     attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and     executed during model loading. (CVE-2025-1550)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a
    manually constructed, malicious .keras archive. By altering the config.json file within the archive, an
    attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and
    executed during model loading. (CVE-2025-1550)

ID	Name	Product	Family	Severity
295913	Azure Linux 3.0 Security Update: keras (CVE-2025-1550)	Nessus	Azure Linux Local Security Checks	high
260510	Linux Distros Unpatched Vulnerability : CVE-2025-1550	Nessus	Misc.	high
421099	SCA: security update for keras (GHSA-48g7-3x6r-xfhp)	Tenable Cloud Security	SCA Checks	high
421099	SCA: security update for keras (GHSA-48g7-3x6r-xfhp)	Tenable Self-Hosted Container Security	SCA Checks	high

Detections

Analytics

CVE-2025-1550

high

Tenable Plugins

high

high

high

high