CVE-2026-94091: piskvorky gensim Model Loader utils.py load deserialization
A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulation of the argument fname causes deserialization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Maintainer closed #3663 same-day with no comment, PR, or fix; repo's last push (2025-11-01) predates the report, so the unsafe pickle.load in SaveLoad.load remains unguarded at develop HEAD.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
piskvorky gensim versions up to 4.4.0 are identified as affected. The reported vulnerable code path is SaveLoad.load in gensim/utils.py.
What does an attacker need to exploit this issue?
The attacker needs low-level privileges and user interaction, and must be able to manipulate the fname argument used by the model-loading function. The vulnerability is remotely initiable according to the report.
Is a fix available?
No fix is identified in the provided information. The report states that the issue was closed without a comment, pull request, or fix, and that the unsafe pickle.load remained unguarded at the develop head.
How urgent is mitigation?
A public exploit is reported as available and potentially usable in attacks. Until a fix is available, avoid loading model files or paths whose source or fname value can be influenced by untrusted parties.