CVE-2026-12570: A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading maliciou
Summary
A vulnerability in Keras (a machine learning library) versions 3.15.0 and earlier allows attackers to crash applications by creating malicious .keras model files. When the keras.models.load_model() function opens these files, it doesn't check how much memory the data needs, causing the program to run out of memory (OOM, an out-of-memory condition where the system can't allocate more space) and crash. This risk affects machine learning pipelines that load models from untrusted sources like public repositories.
Vulnerability Details
EPSS: 0.0%
August 10, 2026
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2024-37052: Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-12570
First tracked: August 10, 2026 at 08:07 AM
Classified by LLM (prompt v3) · confidence: 95%