A vulnerability categorized as problematic has been discovered in Keras up to 3.10.x. This impacts the function enable_unsafe_deserialization. Such manipulation leads to deserialization.

This vulnerability is traded as CVE-2025-9906. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.