Google TensorFlow OS command injection vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. An operating system command injection vulnerability exists in Google TensorFlow, which stems from the fact that the saved_model_cli tool is vulnerable to code injection because it calls eval on a user-supplied string. An attacker could exploit the vulnerability to run arbitrary code on the platform where the CLI tool is running.