CVE-2026-94091 piskvorky CVE debrief

Who should care

Defenders responsible for gensim installations should assess exposure to remote exploitation vectors and prioritize verifying the inventory of installations. They should also review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. Additionally, defenders should consider implementing compensating controls to mitigate potential risks and track exceptions, retest remediated assets, and close the item only

Why it matters

A weakness in piskvorky gensim up to 4.4.0 allows for deserialization when loading a model, which can be exploited remotely. Defenders should prioritize verifying the inventory of gensim installations and assessing exposure to remote exploitation vectors.

• Verify inventory of gensim installations
• Assess exposure to remote exploitation vectors
• Implement compensating controls to mitigate potential risks

Technical summary

The vulnerability is located in the `Load` function of `gensim/utils.py` and allows for deserialization when loading a model. This issue can be exploited remotely, potentially leading to arbitrary code execution. The vulnerability is caused by the insecure use of the `pickle.load` function, which can be manipulated to execute malicious code. Defenders should prioritize verifying the inventory of gensim installations and assessing exposure to remote exploitation vectors to mitigate potential risks. The exploit has been made public, and defenders should be aware of the potential risks and take necessary precautions.

Defensive priority

Defenders should prioritize verifying the inventory of gensim installations and assessing exposure to remote exploitation vectors.

Recommended defensive actions

• Verify the inventory of gensim installations
• Assess exposure to remote exploitation vectors
• Consider implementing compensating controls to mitigate potential risks
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in piskvorky gensim. The issue is related to insecure deserialization in the `Load` function of `gensim/utils.py`. The vulnerability allows for remote exploitation, and the exploit has been made public. However, there is no immediate fix or patch available. The maintainer closed the related issue without providing a solution.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.