---
title: "CVE-2025-9906\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2025-9906?format=md
keywords: index, follow
---

# CVE-2025-9906

Publication date 19 September 2025

Last updated 20 September 2025

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

The Keras Model.load\_model method can be exploited to achieve arbitrary
code execution, even with safe\_mode=True.
One can create a specially crafted .keras model archive that, when loaded
via Model.load\_model, will trigger arbitrary code to be executed. This is
achieved by crafting a special config.json (a file within the
.keras archive) that will invoke
keras.config.enable\_unsafe\_deserialization() to disable safe mode. Once
safe mode is disable, one can use the Lambda layer feature of keras, which
allows arbitrary Python code in the form of pickled code. Both can appear
in the same archive. Simply the
keras.config.enable\_unsafe\_deserialization() needs to appear first in the
archive and the Lambda with arbitrary code needs to be second.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| keras | 26.04 LTS resolute | Not in release |
| 25.10 questing | Not in release |
| 25.04 plucky | Not in release |
| 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release |
| 20.04 LTS focal | Needs evaluation |
| 18.04 LTS bionic | Needs evaluation |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9906)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2025-9906)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2025-9906)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2025-9906)

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2025-9906>
* <https://github.com/keras-team/keras/pull/21429>