Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-0897

30
FAUCET Score

CVE-2026-0897 is a Denial of Service vulnerability affecting Google Keras versions 3.0.0 through 3.13.0 on all platforms. It stems from an "Allocation of Resources Without Limits or Throttling" flaw in the HDF5 weight loading component, allowing a remote attacker to trigger memory exhaustion and a Python interpreter crash. The vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity and high impact on availability. While there is no evidence of active exploitation, nor publicly available exploit code, the vulnerability has garnered significant community discussion, suggesting awareness among security researchers.

Impacted Technologies

VendorProductVersion(s)CPE
>= 3.0.0, <= 3.13.0CPE matchmatch criteria
cpe:2.3:a:keras:keras:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

7.1HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
PASSIVE
VS Confidentiality
NONE
VS Integrity
NONE
VS Availability
HIGH
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.30%
Probability of exploitation in next 30 days
EPSS Percentile
22.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0030 is in the 5th percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (14)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: 20859-17084Fixed in: 3.3.3-6
microsoftpatch availablevia msrc
Product: azl3 keras 3.3.3-6 on Azure Linux 3.0Fixed in: 3.3.3-6
pippatch availablevia ghsa
Product: kerasFixed in: 3.13.2
pippatch availablevia ghsa
Product: kerasFixed in: 3.12.1
pippatch availablevia ghsa
Product: kerasFixed in: 3.13.1
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-kserve-storage-initializer-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9
redhatno patchvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/model-transparency-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-modelmesh-runtime-adapter-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-modelmesh-runtime-adapter-rhel9

Vendor Advisories (4)

pipGHSA-mgx6-5cf9-rr43high

Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor)

May 6, 2026
pipGHSA-xfhx-r7ww-5995high

Duplicate Advisory: Google Keras Allocates Resources Without Limits or Throttling in the HDF5 weight loading component

Jan 15, 2026
redhatCVE-2026-0897Important

Keras: Keras: Denial of Service via crafted HDF5 weight loading file

Jan 15, 2026
microsoft2026-Jan/CVE-2026-0897Important

Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata

Jan 13, 2026

References

access.redhat.com / errata/RHSA-2026:3713
access.redhat.com / errata/RHSA-2026:3782
access.redhat.com / errata/RHSA-2026:4271
access.redhat.com / security/cve/CVE-2026-0897
bugzilla.redhat.com / show_bug.cgi
security.access.redhat.com / data/csaf/v2/vex/2026/cve-2026-0897.json
github.com / keras-team/keras/pull/21880
Issue TrackingPatch