Arbitrary Code Execution Vulnerability in Keras Package by Keras Team

CVE-2026-1462

What is CVE-2026-1462?

A vulnerability in the TFSMLayer class of the keras package allows attacker-controlled TensorFlow SavedModels to be deserialized, even when safe_mode=True, leading to arbitrary code execution during model inference. This issue stems from the unconditional loading of external SavedModels, serialization of attacker-controlled paths, and inadequate validation in the from_config() method. Attackers can exploit this vulnerability to execute malicious code under the victim's privileges, undermining the security intended by the safe_mode setting.

References