Unsafe Deserialization Vulnerability in Keras TorchModuleWrapper

2026-07-19 20:20 UTC

🔓 VULNERABILITIES & CVEs

Unsafe Deserialization Vulnerability in Keras TorchModuleWrapper — CVE Threat Intelligence CVE-2026-12484 (CVSS 7.8) affects keras.layers.TorchModuleWrapper.from_config and involves unsafe deserialization.
- This vulnerability could allow attackers to execute arbitrary code remotely by exploiting unsafe deserialization in Keras.
- Users of Keras with TorchModuleWrapper should prioritize patching to mitigate risk.

Start with the free Posture Self-Check to see where you stand against the current threat landscape.