A look into how I discovered an RCE in TensorFlow/Keras caused by unsafe YAML deserialization, how it worked, and what I learned from it.