Detections
Analytics

SCA: security update for keras (GHSA-mq84-hjqx-cwf2)

medium Tenable Cloud Security Plugin ID 435855

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - The Keras.Model.load_model method, including when executed with the intended security mitigation
 safe_mode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery (SSRF). This
 vulnerability stems from the way the StringLookup layer is handled during model loading from a specially
 crafted .keras archive. The constructor for the StringLookup layer accepts a vocabulary argument that can
 specify a local file path or a remote file path. * Arbitrary Local File Read: An attacker can create a
 malicious .keras file that embeds a local path in the StringLookup layer's configuration. When the model
 is loaded, Keras will attempt to read the content of the specified local file and incorporate it into the
 model state (e.g., retrievable via get_vocabulary()), allowing an attacker to read arbitrary local files
 on the hosting system. * Server-Side Request Forgery (SSRF): Keras utilizes tf.io.gfile for file
 operations. Since tf.io.gfile supports remote filesystem handlers (such as GCS and HDFS) and HTTP/HTTPS
 protocols, the same mechanism can be leveraged to fetch content from arbitrary network endpoints on the
 server's behalf, resulting in an SSRF condition. The security issue is that the feature allowing external
 path loading was not properly restricted by the safe_mode=True flag, which was intended to prevent such
 unintended data access. (CVE-2025-12058)

See Also

https://github.com/advisories/GHSA-mq84-hjqx-cwf2

Plugin Details

Severity: Medium

ID: 435855

Version: Revision 1.6

Type: Local

Family: SCA Checks

Published: 10/29/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.73

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Low

Base Score: 2.1

Temporal Score: 1.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2025-12058

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: Medium

Base Score: 5.9

Threat Score: 1.7

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:P/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 10/29/2025

Vulnerability Publication Date: 10/29/2025

Reference Information

CVE: CVE-2025-12058