A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`. This bypasses the security guarantees of `safe_mode` and enables arbitrary attacker-controlled code execution during model inference under the victim's privileges. The issue arises due to the unconditional loading of external SavedModels, serialization of attacker-controlled file paths, and the lack of validation in the `from_config()` method.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-
    controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when
    `safe_mode=True`. This bypasses the security guarantees of `safe_mode` and enables arbitrary attacker-
    controlled code execution during model inference under the victim's privileges. The issue arises due to
    the unconditional loading of external SavedModels, serialization of attacker-controlled file paths, and
    the lack of validation in the `from_config()` method. (CVE-2026-1462)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-     controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when     `safe_mode=True`. This bypasses the security guarantees of `safe_mode` and enables arbitrary attacker-     controlled code execution during model inference under the victim's privileges. The issue arises due to     the unconditional loading of external SavedModels, serialization of attacker-controlled file paths, and     the lack of validation in the `from_config()` method. (CVE-2026-1462)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
440419	SCA: security update for keras (GHSA-4f3f-g24h-fr8m)	Tenable Cloud Security	SCA Checks	high
440419	SCA: security update for keras (GHSA-4f3f-g24h-fr8m)	Tenable Self-Hosted Container Security	SCA Checks	high
306380	Linux Distros Unpatched Vulnerability : CVE-2026-1462	Nessus	Misc.	high

Detections

Analytics

CVE-2026-1462

high

Tenable Plugins

high

high

high