EUVD-2026-83795

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulation of the argument fname causes deserialization. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-94091

A deserialization flaw exists in piskvorky gensim (up to 4.4.0 ) in the Model Loader component, specifically the Load function in gensim/utils.py. The root cause is an unguarded pickle.load call in SaveLoad.load when processing the fname argument, enabling remote exploitation. The maintainers clo...