CVE-2026-12480

Name of the Vulnerable Software and Affected Versions Keras versions prior to 3.12.2 Keras versions 3.12.2 through 3.13.2

Description An arbitrary HDF5 file read issue exists due to an incomplete fix for a previous flaw. The problem is located in the H5IOStore. verify dataset() method and file editor.py, which do not validate the dataset.is virtual property of HDF5 datasets. This allows an attacker to create a malicious .keras model archive or .h5 weights file containing a Virtual Dataset (VDS)—a dataset that references data stored in other HDF5 files. When a user loads such a model using keras.models.load model() or keras.saving.load model(), external files on the local filesystem are read, potentially leading to information disclosure.

Recommendations Update to version 3.12.2. Update to version 3.14.1.