VULNERABILITY INTELLIGENCE
CVE-2026-1462
CVSS score7.8 HIGH
EPSS probability0.40%
CISA KEVNot currently listed
Published2026-04-13
Last modified2026-07-15
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`. This bypasses the security guarantees of `safe_mode` and enables arbitrary attacker-controlled code execution during model inference under the victim's privileges. The issue arises due to the unconditional loading of external SavedModels, serialization of attacker-controlled file paths, and the lack of validation in the `from_config()` method.
Weakness classification
- security@huntr.dev: CWE-502
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-502
Primary references
- security@huntr.dev — Patch
- security@huntr.dev — Exploit, Third Party Advisory
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c — Third Party Advisory
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c — Third Party Advisory
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c — Issue Tracking, Third Party Advisory
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c — Third Party Advisory