MediumVulnerability
CVE-2026-94091: piskvorky gensim deserialization flaw in Load function of utils.py
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-94091
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
A weakness in the Load function of gensim/utils.py in piskvorky gensim up to 4.4.0 (Model Loader component) allows deserialization when the fname argument is manipulated, and it can be triggered remotely. A public exploit exists. The maintainer closed issue #3663 the same day without a comment, patch, or fix, and the unsafe pickle.load in SaveLoad.load remains unguarded at develop HEAD.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
- InfoA Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor AttacksSimilar attack · Arxiv (cs.RO + cs.CV security)
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
- HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database