{"data":{"id":"7d2b9558-9839-4d43-b22e-27bc25073075","title":"CVE-2026-1462: A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow…","summary":"CVE-2026-1462 affects the `TFSMLayer` class in the `keras` package, version 3.13.0. Attacker-controlled TensorFlow SavedModels load during deserialization of `.keras` models even when `safe_mode=True`, bypassing that protection. The result is arbitrary code execution during model inference under the victim's privileges, caused by unconditional loading of external SavedModels, serialization of attacker-controlled file paths, and missing validation in `from_config()`.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-1462","publishedAt":"2026-04-13T15:17:18.967Z","cveId":"CVE-2026-1462","cweIds":["CWE-502"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain","model_evasion"],"issueType":"vulnerability","affectedPackages":["keras@< 3.13.2 (fixed: 3.13.2)"],"affectedPackageNames":["keras"],"affectedPackageRefs":["pypi:keras"],"affectedVendors":["Google"],"affectedVendorsRaw":["Keras","TensorFlow","TFSMLayer"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Keras TFSMLayer loads attacker-controlled SavedModels despite safe_mode","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00405,"epssCheckedAt":"2026-10-15T06:09:21.756Z","kevDateAdded":null,"advisoryAliases":["GHSA-4f3f-g24h-fr8m"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:30.864Z","patchAvailable":true,"disclosureDate":"2026-04-13T15:17:18.967Z","capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","safety"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"]}}