Deserialization Vulnerability in Keras Product by Keras Team

CVE-2026-12484

What is CVE-2026-12484?

A vulnerability exists in Keras version 3.15.0 that enables unsafe deserialization of untrusted PyTorch pickle data through the 'keras.layers.TorchModuleWrapper.from_config' method. This method does not require an explicit opt-in for unsafe operations, which may lead to arbitrary code execution when untrusted Keras layer configurations are processed. The lack of enforced safe deserialization practices outside a defined SafeModeScope increases the risk, potentially allowing attackers to exploit the system.

References