BRAINDECODE · CVE-2026-126994 · Package
NO FIX YET · SEE WHAT TO DO
braindecode, a Python library for EEG deep learning models, passes externally controlled values from a model config (the Activation argument) into code that selects classes, so a crafted config can make the library run attacker-chosen code. The sources say the exploit is public and can be launched remotely.
first public Nov 12, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that load braindecode model configurations from sources they do not fully control, such as user uploads, shared config files or external APIs, are exposed. Projects that only build models from their own hard-coded configs are less exposed, but the sources do not say that explicitly.
Not affected if hard-coded-configs, no-untrusted-model-config
Who cares braindecode, machine-learning, python
pip show braindecode; versions up to and including 1.8.1 are listed as affected.resolve_type_kwargs in braindecode/models/util.py.2.0.0 (the sources name a patch commit, 05b764d93b9a50400f523206fbe03d73d0cf5edb).A vulnerability has been found in braindecode up to 1.8.1. Affected is the function resolve_type_kwargs of the file braindecode/models/util.py of the component Model Config Deserialization. Such manipulation of the argument Activation leads to use of externally-controlled input to select classes or code. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.0 is able to address this issue. The name of the patch is 05b764d93b9a50400f523206fbe03d73d0cf5edb. The affected component should be upgraded.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.