CVE-2026-9335

A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The `KerasFileEditor` and `keras.saving.load_weights` functions bypass the `safe_get_h5_group` and `safe_get_h5_dataset` helpers, which are designed to reject ExternalLinks and SoftLinks. This results in automatic dereferencing of links to external HDF5 files, enabling attackers to disclose sensitive data from the victim's local filesystem. Specifically, `KerasFileEditor` extracts attributes and datasets from linked files into its internal structures, while `keras.saving.load_weights` loads weights from linked files into the user's model. This issue can be exploited by providing a malicious `.h5`, `.weights.h5`, or `.keras` file containing ExternalLinks.

• CWE-22

• https://github.com/keras-team/keras/commit/23370f16b0ab9a200f7550a34e54a3ceab74ba0e
• https://huntr.com/bounties/876a7226-5428-4a66-9d05-232461120db5

Published

Aug 2, 2026

Last Modified

Aug 3, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9319IBM WebSphere Application Server 9.0, and 8.5 is vulnerable …9
• CVE-2026-9320IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSph…7.5
• CVE-2026-9322IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSph…7.5
• CVE-2026-9323The urwid web display backend (urwid/display/web.py) generat…9.2
• CVE-2026-9330IBM WebSphere Application Server 9.0, and 8.5 is affected by…8.5
• CVE-2026-9334Cpanel::JSON::XS versions before 4.41 for Perl allow type co…7.3
• CVE-2026-9341The Academy LMS – WordPress LMS Plugin for Complete eLearnin…4.3
• CVE-2026-9342A security flaw has been discovered in SourceCodester Hospit…6.3
• CVE-2026-9343A weakness has been identified in Edimax EW-7438RPn up to 1.…6.3
• CVE-2026-9344A security vulnerability has been detected in Edimax EW-7438…8.8
• CVE-2026-9345A vulnerability was detected in Edimax EW-7438RPn up to 1.31…8.8
• CVE-2026-9346A flaw has been found in Edimax EW-7438RPn up to 1.31. This …8.8