PoC: Keras Lambda Layer ACE
Vulnerability
Arbitrary Code Execution via Keras Lambda Layer Deserialization
Format
Keras Native (.keras)
Impact
- Full system compromise when model loaded with safe_mode=False
- Arbitrary code execution
- Bounty: $3,000-$4,000
Test
keras.config.enable_unsafe_deserialization()
model = keras.models.load_model('malicious_keras_ace.keras') # RCE!