{"data":{"id":"d756b1c3-28f8-4402-85ad-2f507a6541e4","title":"CVE-2026-12484: A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle d","summary":"A vulnerability in Keras (a machine learning library) version 3.15.0 allows attackers to run arbitrary code by sending malicious data to the `keras.layers.TorchModuleWrapper.from_config` method. The method uses `torch.load` (a function that reconstructs PyTorch objects from saved data) with unsafe settings by default, and doesn't require users to explicitly opt into safe mode before processing untrusted configurations.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12484","publishedAt":"2026-07-19T20:16:28.800Z","cveId":"CVE-2026-12484","cweIds":["CWE-502"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["model_poisoning"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["keras-team/keras","PyTorch"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-07-19T20:16:28.800Z","capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}