What is CVE-2025-49655?

CVE-2025-49655 is a critical-severity vulnerability in Keras, classified under Deserialization of Untrusted Data. CVSS score: 9.8/10. Published 2025-10-17.

How severe is CVE-2025-49655?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Deserialization in Keras

CVE-2025-49655

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.

Vulnerability class: Insecure Deserialization

EPSS: 0.007 (49.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Keras — versions 3.11.0

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

Frequently asked questions

What is CVE-2025-49655?: CVE-2025-49655 is a critical-severity vulnerability in Keras, classified under Deserialization of Untrusted Data. CVSS score: 9.8/10. Published 2025-10-17.
How severe is CVE-2025-49655?: Critical severity. CVSS v3 base score is 9.8 out of 10.