Keras HDF5 Integration Arbitrary File Read Vulnerability

A vulnerability allowing arbitrary file read has been identified in the model loading mechanism of Keras, specifically in versions 3.0.0 through 3.13.1, across all supported platforms. This issue arises from the integration with HDF5, which allows external dataset references to be exploited. A remote attacker could craft a .keras model file that, when processed, references local files and discloses sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access and disclosure of local files, potentially containing sensitive information.