CVE-2026-126994 | braindecode up to 1.8.1 Model Config Deserialization util.py resolve_type_kwargs activation externally-controlled input to select classes or code (Issue 1441)

A vulnerability labeled as critical has been found in braindecode up to 1.8.1. Affected is the function resolve_type_kwargs of the file braindecode/models/util.py of the component Model Config Deserialization. Such manipulation of the argument Activation leads to use of externally-controlled input to select classes or code.

This vulnerability is uniquely identified as CVE-2026-126994. The attack can be launched remotely. Moreover, an exploit is present.

The affected component should be upgraded.VulDB Recent EntriesRead More