MediumVulnerability
CVE-2026-126994: braindecode model config deserialization flaw via activation argument
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-126994
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
CVE-2026-126994 affects braindecode up to 1.8.1, specifically the resolve_type_kwargs function in braindecode/models/util.py within the Model Config Deserialization component. Manipulating the Activation argument leads to use of externally controlled input to select classes or code, and the attack can be launched remotely. A public exploit exists and may be used.
Mitigation
Upgrading to version 2.0.0 addresses this issue. The patch is 05b764d93b9a50400f523206fbe03d73d0cf5edb, and the affected component should be upgraded.
Related items
- MediumCVE-2026-127202: MLflow path traversal through model_id in the log outputs APISimilar attack · NVD/CVE Database
- LowAI chatbots are recommending fake retail websites, study findsSimilar attack · The Verge (AI)
- MediumPalo Alto tracks a massive Chinese AI attack that sadly lives up to industry fearsSimilar attack · CSO Online
- MediumAttackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society SectorsSimilar attack · Palo Alto Unit 42
- MediumAI found Linux kernel bugs that remained undetected for decadesSimilar attack · CSO Online