Keras Malicious Vocabulary File Creation

Tim Peck@timpeck

•updated Nov 5, 2025•3•1•59

Detects the creation of a Keras model file (.keras) that contains suspicious file paths or URLs. This may indicate an attempt to exploit CVE-2025-12058 for local file inclusion or server-side request forgery (SSRF).