{"id":79008,"date":"2025-09-28T14:42:49","date_gmt":"2025-09-28T14:42:49","guid":{"rendered":""},"modified":"2025-10-21T17:37:16","modified_gmt":"2025-10-21T23:37:16","slug":"cve-2025-8747-safe-mode-bypass-vulnerability-in-keras-leads-to-arbitrary-code-execution","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-8747-safe-mode-bypass-vulnerability-in-keras-leads-to-arbitrary-code-execution\/","title":{"rendered":"CVE-2025-8747: Safe Mode Bypass Vulnerability in Keras Leads to Arbitrary Code Execution<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

In the realm of machine learning, Keras is a popular open-source software library used widely for developing and experimenting with deep learning models. However, recently a significant vulnerability, CVE-2025-8747, has been identified in Keras versions 3.0.0 through 3.10.0. This vulnerability can potentially expose systems<\/a> to security risks such as data leakage and system compromise.
\nThe importance of this vulnerability<\/a> stems from the widespread use of Keras across various industries and academia, thereby increasing the number of potential targets for cybercriminals. Furthermore, the nature of the vulnerability, which allows arbitrary code execution<\/a>, escalates the severity and potential impact of this security issue.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-8747
\nSeverity: High (7.8 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: System compromise and potential data<\/a> leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n