CVE-2026-12484 | keras-team keras up to 3.15.0 TorchModuleWrapper TorchModuleWrapper.from_config deserialization

July 19, 2026 Yanac

A vulnerability labeled as critical has been found in keras-team keras up to 3.15.0. The impacted element is the function TorchModuleWrapper.from_config of the component TorchModuleWrapper. Executing a manipulation can lead to deserialization.

This vulnerability is registered as CVE-2026-12484. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More