Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-76843— Flair 0.15.0 and 0.15.1 Deserialization of Untrusted Data via ClusteringModel.load

Quick assessment

Affected
flairNLP flair
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

0.15.0 和 0.15.1 版本的 Flair 官方车轮包中仍然包含 文件。该文件中的 静态方法通过调用 来加载模型，从而在执行任意 Python 代码加载模型文件时存在漏洞。攻击者提供的模型一旦被加载，便会以加载该模型的进程的权限执行攻击者注入的代码。 这与 CVE-2024-10073 中记录的漏洞相同，涉及相同的漏洞利用点（sink）和相同文件。CVE-2024-10073 将 0.15.0 列为修复版本，理由是 0.15.0 版本中已不再支持聚类功能；虽然该模块已从官方文档化的 API 中移除，但它仍然

CVSS 7.8 · High EPSS 0.15% · P4

Affected Version Matrix 1

VendorProduct Version RangeStatus
flairNLP flair 0.15.0≤ 0.15.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-76843

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Flair 0.15.0 and 0.15.1 Deserialization of Untrusted Data via ClusteringModel.load
Source: CVE Program / CVE List V5
Vulnerability Description
The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(model_file))) and so executes arbitrary Python while loading a model file. Loading a model supplied by an attacker therefore runs that attacker's code with the privileges of the loading process. This is the same sink and the same file as CVE-2024-10073, which records 0.15.0 as the fixed version on the basis that clustering support was dropped in that release; the module was removed from the documented API but remains present in the distributed artifact and reachable by importing flair.models.clustering directly, so the earlier record's fixed version does not hold for the shipped package.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
flairNLP flair 0.15.0 ~ 0.15.1 -

II. Public POCs for CVE-2026-76843

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 7768 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-76843

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-76843 (1)

Vendor Pages for CVE-2026-76843 (1)

Other References for CVE-2026-76843 (1)

IV. Related Vulnerabilities

Same product: flair
Same vendor: flairNLP
Same weakness: CWE-502

V. Comments for CVE-2026-76843

No comments yet

Leave a comment