CVE-2026-9335 | keras-team Keras up to 3.14.0 HDF5 Link keras.saving.load_weights information disclosure

A vulnerability was found in keras-team Keras up to 3.14.0. It has been rated as problematic. The impacted element is the function keras.saving.load_weights of the component HDF5 Link Handler. This manipulation causes information disclosure.

This vulnerability is registered as CVE-2026-9335. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.