CVE-2026-108958 - Vulnerability Details

- TensorLayer HDF5 Loading utils.py load_hdf5_graph deserialization

Description

A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation of the argument model_config can lead to deserialization. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Published: 2026-10-13

Score: 5.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

In TensorLayer versions up to 2.2.4 the load_hdf5_graph function in utils.py deserializes the model_config argument without validating its content. This flaw permits a remote attacker to craft a malicious model configuration that will be deserialized and executed by the framework, potentially leading to arbitrary code execution or other unintended behavior. The vulnerability resides in the HDF5 loading component and is formally classified as CWE-502: Deserialization of Untrusted Data, as well as CWE-20: Improper Input Validation.

Affected Systems

The affected product is TensorLayer, a deep learning library. All releases up to and including 2.2.4 are affected. No newer releases were specified in the data, so environments running any of these versions that expose the load_hdf5_graph functionality are at risk.

Risk and Exploitability

The CVSS score for this flaw is 5.3, indicating moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalogue. Because the attack can be launched remotely and the exploit code has been publicly released, the risk remains significant as long as the vulnerable component remains in use. No additional mitigations have been released by the vendor, so environments must rely on defensive steps until an official patch is made available.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

TensorLayer

affected

Version	Status	Constraints
`2.2.0`	affected	—
`2.2.1`	affected	—
`2.2.2`	affected	—
`2.2.3`	affected	—
`2.2.4`	affected	—

No data.

Vendor Product Confidence Versions

Tensorlayer

95%

Version	Status	Scheme	Platform
`2.2.0`	affected	semver	—
`2.2.1`	affected	semver	—
`2.2.2`	affected	semver	—
`2.2.3`	affected	semver	—
`2.2.4`	affected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Restrict the load_hdf5_graph API to internal or authenticated users only, eliminating direct exposure to untrusted clients.
Validate the structure and type of the model_config payload before deserialization, such as by applying a strict schema or type checks, to prevent the creation of malicious objects.
Monitor application logs for abnormal deserialization calls and trigger alerts on suspicious activity, thereby detecting potential exploitation attempts in the interim.

Generated by OpenCVE AI on October 13, 2026 at 03:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Passive

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction Required

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction Required

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00259.

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/tensorlayer/TensorLayer/
https://github.com/tensorlayer/TensorLayer/issues/1169
https://vuldb.com/cve/CVE-2026-108958
https://vuldb.com/submit/997885
https://vuldb.com/vuln/416777
https://vuldb.com/vuln/416777/cti

History

Wed, 14 Oct 2026 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 13 Oct 2026 02:45:00 +0000

Type	Values Removed	Values Added
Description		A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation of the argument model_config can lead to deserialization. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Title		TensorLayer HDF5 Loading utils.py load_hdf5_graph deserialization
First Time appeared		Tensorlayer Tensorlayer tensorlayer
Weaknesses		CWE-20 CWE-502
CPEs		cpe:2.3:a:tensorlayer:tensorlayer::::::::
Vendors & Products		Tensorlayer Tensorlayer tensorlayer
References		https://github.com/tensorlayer/TensorLayer/ https://github.com/tensorlayer/TensorLayer/issues/1169 https://vuldb.com/cve/CVE-2026-108958 https://vuldb.com/submit/997885 https://vuldb.com/vuln/416777 https://vuldb.com/vuln/416777/cti
Metrics		cvssV2_0 `{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C'}` cvssV3_0 `{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}` cvssV3_1 `{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Tensorlayer Tensorlayer

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-10-13T02:30:16.903Z

Updated: 2026-10-14T13:33:35.919Z

Reserved: 2026-10-11T19:23:43.822Z

Link: CVE-2026-108958

Vulnrichment

Updated: 2026-10-14T13:33:28.510Z

NVD

Status : Deferred

Published: 2026-10-13T03:16:40.390

Modified: 2026-10-14T14:17:35.940

Link: CVE-2026-108958

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-13T07:23:35Z

Weaknesses

CWE-20
Improper Input Validation
CWE-502
Deserialization of Untrusted Data

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Passive

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction Required

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction Required

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Exploitation poc

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object