CVE-2026-95928: recommenders-team recommenders Dict Loading mind_iterator.py pickle.load deserialization
A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load of the file recommenders/models/newsrec/io/minditerator.py of the component Dict Loading. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
The affected package is pypi/recommenders, with versions up to and including 1.2.1 identified as impacted. The vulnerable code is in recommenders/models/newsrec/io/mind_iterator.py, specifically its dictionary-loading use of pickle.load.
What access does an attacker need to exploit this issue?
The supplied severity vector indicates network reachability, low attack complexity, low privileges required, and user interaction required. Exploitation involves manipulating data that is deserialized by pickle.load.
Is public exploit information available?
Yes. The vulnerability data states that an exploit has been publicly released and may be used in attacks.
What should teams do if a patch is not available?
No vendor response or fix is reported. Reduce exposure by preventing untrusted or attacker-manipulated serialized data from reaching the affected dictionary-loading path, and restrict access to systems that can invoke it.