---
title: "CVE-2026-9335\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2026-9335?format=md
keywords: index, follow
---

# CVE-2026-9335

Publication date 2 August 2026

Last updated 7 August 2026

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

## Cvss 3 Severity Score

**6.5 · Medium**

[Score breakdown](https://ubuntu.com/security/CVE-2026-9335?format=md#impact-score)

Toggle side navigation

## Description

A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary
local HDF5 file content disclosure due to improper handling of HDF5
ExternalLinks. The `KerasFileEditor` and `keras.saving.load\_weights`
functions bypass the `safe\_get\_h5\_group` and `safe\_get\_h5\_dataset` helpers,
which are designed to reject ExternalLinks and SoftLinks. This results in
automatic dereferencing of links to external HDF5 files, enabling attackers
to disclose sensitive data from the victim's local filesystem.
Specifically, `KerasFileEditor` extracts attributes and datasets from
linked files into its internal structures, while
`keras.saving.load\_weights` loads weights from linked files into the user's
model. This issue can be exploited by providing a malicious `.h5`,
`.weights.h5`, or `.keras` file containing ExternalLinks.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| keras | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release |
| 20.04 LTS focal | Needs evaluation |
| 18.04 LTS bionic | Needs evaluation |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## Severity score breakdown

CVSS version:
CVSS v3.0

**Base score**

6.5 · Medium

* Base metrics

  | Parameter | Value |
  | --- | --- |
  | Attack vector | Network |
  | Attack complexity | Low |
  | Privileges required | None |
  | User interaction | Required |
  | Scope | Unchanged |
  | Confidentiality impact | High |
  | Integrity impact | None |
  | Availability impact | None |
* Scores

  | Parameter | Value |
  | --- | --- |
  | Base score | 6.5 · Medium |
  | Exploitability score | - |
  | Impact score | - |

**Vector:** CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9335)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2026-9335)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2026-9335)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2026-9335)

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2026-9335>
* <https://github.com/keras-team/keras/commit/23370f16b0ab9a200f7550a34e54a3ceab74ba0e>
* <https://huntr.com/bounties/876a7226-5428-4a66-9d05-232461120db5>