Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.0

piskvorky/gensim may let attackers run code when loading

CVE-2026-94091 · published 29 days ago
Summary

The function that loads saved models in piskvorky/gensim (up to version 4.4.0) can be tricked into executing hidden code from a specially crafted file. An attacker could send such a file and cause the program to run whatever they want. Stop using this version or only load files you completely trust until a safe update is released.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
piskvorky gensim 4.0
Original advisory text
piskvorky gensim Model Loader utils.py load deserialization
A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulation of the argument fname causes deserialization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Maintainer closed #3663 same-day with no comment, PR, or fix; repo's last push (2025-11-01) predates the report, so the unsafe pickle.load in SaveLoad.load remains unguarded at develop HEAD.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
2.0 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-502Deserialization of Untrusted Data
CWE-20Improper Input Validation
Timeline
Published20 Sep 2026
Updated19 Oct 2026
First seen20 Sep 2026
Sources
CVE-2026-94091 · NVD
CVE-2026-94091 · MITRE
CVE-2026-94091 · OSV
Track software like this
Free during beta