CVE catalog
CVE-2025-49655
UBUNTU-CVE-2025-49655
- Severity
- High · CVSS 8.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.75% · Oct 25, 2026
Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | keras | 11 | 2.3.1+dfsg-3 | vulnerable |
| Debian | keras | 11 | 2.3.1+dfsg2-1 | vulnerable |
| Ubuntu | keras | 18.04 | 1.0.7-2 | vulnerable |
| Ubuntu | keras | 18.04 | 2.1.1-1 | vulnerable |
| Ubuntu | keras | 20.04 | 2.2.4-1 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: