CVE-2026-94091: A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file ge

A vulnerability exists in gensim (a machine learning library) version 4.4.0 and earlier in its Model Loader component, where an attacker can manipulate the fname argument to trigger unsafe deserialization (a process where an AI system reconstructs objects from stored data, which can be exploited to run malicious code). The vulnerability can be triggered remotely and exploits the unguarded pickle.load function (a Python method for loading saved data that can execute arbitrary code if the data is malicious), with the maintainers closing the issue without providing a fix.