CVE-2026-12484Disclosure

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public `keras.layers.TorchModuleWrapper.from_config` method. This method invokes `torch.load(..., weights_only=False)` without requiring an explicit unsafe opt-in, such as a `safe_mode=False` parameter. When called outside a `SafeModeScope(True)` context, the absence of an ambient safe mode state permits unsafe deserialization by default. This issue can lead to arbitrary code execution if untrusted Keras layer configurations are processed using this method. The vulnerability arises because the method does not enforce safe deserialization practices unless explicitly guarded by Keras safe mode.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-07-19); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-19	2	Disclosure2
2026-07-20	1	Disclosure1

Full discourse3 posts

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters91d
Disclosure
#CVE-2026-12484 - Insecure Deserialization in Keras-Team. Unsafe PyTorch pickle loading in torch.load via TorchModuleWrapper.from_config. #CVSS 7.8. Patch unknown, restrict usage immediately. #CVEAlert #infosec #AIsecurity #devsecops #devops #developer https://www.valtersit.com/cve/CVE-2026-12484/
Post summary
This tweet announces CVE‑2026‑12484, an insecure deserialization flaw in Keras‑Team’s PyTorch utilization (CVSS 7.8), with no patch available and a recommendation to immediately restrict usage.
00041357
1.0K followersView on X
Infoflowcloud@infoflowcloud92d
Disclosure
🚨*CVE* CVE-2026-12484 A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public `keras.layers.TorchModu… https://www.cve.org/CVERecord?id=CVE-2026-12484 ----- Traducción: CVE-2026-12484 Una… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑12484 for keras‑team/keras 3.15.0, describing unsafe deserialization of PyTorch pickle data via a public API, but provides no PoC, exploit code, active exploitation evidence, or patch details.
0000010
92 followersView on X
CVE@CVEnew92d
Disclosure
CVE-2026-12484 A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public `keras.layers.TorchModu… https://www.cve.org/CVERecord?id=CVE-2026-12484
Post summary
The post announces CVE‑2026‑12484, highlighting unsafe deserialization via Keras 3.15.0’s TorchModu layer.
00000795
57.8K followersView on X

Explore more

Back to dashboard