CVE-2026-12481

A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` layer. Specifically, the `_raise_for_lambda_deserialization()` function fails to enforce the safe-mode guard when `safe_mode` is set to `None`, which is the default value when `from_config()` is called outside of a `SafeModeScope` context. This logic error conflates `None` (unset/default-deny) with `False` (explicitly disabled), bypassing the guard and allowing attacker-controlled `marshal` bytecode to be deserialized. Affected call sites include `keras.layers.deserialize(config)`, `keras.models.clone_model(model)`, and any direct invocation of `Lambda.from_config(config)` without an enclosing `SafeModeScope(True)`. This vulnerability can be exploited to achieve arbitrary OS-level code execution in the context of the server or user process.

• CWE-502

• https://huntr.com/bounties/59ceaed1-c8a3-4135-8f94-169ade02823dExploit, Third Party Advisory
• https://huntr.com/bounties/59ceaed1-c8a3-4135-8f94-169ade02823dExploit, Third Party Advisory

Published

Jul 3, 2026

Last Modified

Jul 8, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12475Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-12476The Easy Digital Downloads plugin for WordPress is vulnerabl…7.2
• CVE-2026-12478The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) pl…4.8
• CVE-2026-12479A path traversal vulnerability exists in keras-team/keras ve…6.1
• CVE-2026-1248IBM Business Automation Workflow containers and traditional …4.3
• CVE-2026-12480Keras versions up to and including 3.13.2 are vulnerable to …5.5
• CVE-2026-12482A vulnerability in keras-team/keras version 3.12.0 allows an…6.5
• CVE-2026-12484A vulnerability in keras-team/keras version 3.15.0 allows un…7.8
• CVE-2026-12485GV-I/O Box 4E is a smart embedded device with 4 input and 4 …10
• CVE-2026-12486Multiple OS command injection vulnerabilities exist in the l…9.1
• CVE-2026-12488A memory corruption vulnerability exists in the GV-Cloud fun…6.2
• CVE-2026-1249The MP3 Audio Player – Music Player, Podcast Player & Radio …5