CVE-2026-108958 | TensorLayer up to 2.2.4 HDF5 Loading utils.py load_hdf5_graph model_config deserialization (Issue 1169)

October 11, 2026 Yanac

A vulnerability labeled as critical has been found in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation of the argument model_config can lead to deserialization.

This vulnerability is handled as CVE-2026-108958. The attack can be executed remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More