CVE-2026-12480: Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE

Keras versions up to 3.13.2 have a security flaw that lets attackers read files from your computer by hiding malicious instructions in model files. When you load a model using Keras functions like `keras.models.load_model()`, the vulnerability doesn't properly check if datasets are virtual (pointing to other files), so it automatically reads files an attacker specifies, potentially exposing sensitive data.