Wind River Support Network

HomeDefectsLIN1023-37751
Acknowledged

LIN1023-37751 : Security Advisory - keras - CVE-2026-1669

Created: Oct 23, 2026    Updated: Oct 27, 2026
Resolved Date: Oct 23, 2026
Found In Version: 10.23.30.2
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references.
Data source: Google Inc. (cve-coordination@google.com)
  • Linkedin
  • Facebook
  • Twitter
  • Youtube