CVE-2026-76843 Flair 0.15.0 and 0.15.1 Deserialization of Untrusted Data via ClusteringModel.load
Attackers can execute arbitrary code by supplying a malicious model file to the ClusteringModel.load method in the Flair NLP library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-76843?
CVE-2026-76843 is a high-severity unsafe deserialization vulnerability in flairNLP flair, published on 24 Aug 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(model_file))) and so executes arbitrary Python while loading a model file. Loading a model supplied by an attacker therefore runs that attacker's code with the privileges of the loading process. This is the same sink and the same file as CVE-2024-10073, which records 0.15.0 as the fixed version on the basis that clustering support was dropped in that release; the module was removed from the documented API but remains present in the distributed artifact and reachable by importing flair.models.clustering directly, so the earlier record's fixed version does not hold for the shipped package.
Weakness: CWE-502
Which versions are affected by CVE-2026-76843?
How do I fix CVE-2026-76843?
No fix has been published for CVE-2026-76843 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2026-76843 being exploited?
There is no known exploitation of CVE-2026-76843 in the wild and no public exploit code.
Sources
Also known as GHSA-58g9-h5rx-pf95.