SB2025122221 - Multiple vulnerabilities in IBM Watson Machine Learning on CP4D
Published: December 22, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 secuirty vulnerabilities.
1) Code Injection (CVE-ID: CVE-2025-1550)
The vulnerability allows a local user to execute arbitrary code on the target system.
The vulnerability exists due to improper input validation in the "Model.load_model" function. A local user can execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
2) Deserialization of Untrusted Data (CVE-ID: CVE-2025-8747)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to insecure input validation when processing serialized data even when "safe_mode" is enabled. A remote attacker can trick the victim into loading a specially crafted Keras v3 model and execute arbitrary code on the system.
This vulnerability exists due to an incomplete fix for #VU106013 (CVE-2025-1550).
3) Deserialization of Untrusted Data (CVE-ID: CVE-2025-9906)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to insecure input validation when processing serialized data even when "safe_mode" is enabled. A remote attacker can trick the victim into loading a specially crafted Keras v3 model and execute arbitrary code on the system.
This vulnerability exists due to an incomplete fix for #VU106013 (CVE-2025-1550) and #VU120185 (CVE-2025-8747).
Remediation
Install update from vendor's website.