CVE-2026-76843
Received Received - Intake

Arbitrary Code Execution in Flair Python Library

Publication date: 2026-08-24

Last updated on: 2026-08-24

Assigner: VulnCheck

Description
The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(model_file))) and so executes arbitrary Python while loading a model file. Loading a model supplied by an attacker therefore runs that attacker's code with the privileges of the loading process. This is the same sink and the same file as CVE-2024-10073, which records 0.15.0 as the fixed version on the basis that clustering support was dropped in that release; the module was removed from the documented API but remains present in the distributed artifact and reachable by importing flair.models.clustering directly, so the earlier record's fixed version does not hold for the shipped package.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-24
Last Modified
2026-08-24
Generated
2026-08-24
AI Q&A
2026-08-24
EPSS Evaluated
N/A
NVD
CVE-2026-76843
EUVD
EUVD-2026-64849

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
flair flair to 0.15.0 (inc)
flair flair to 0.15.1 (inc)
flair nlp 0.15.0
flair nlp From 0.15.0 (inc) to 0.15.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Flair versions 0.15.0 and 0.15.1. It involves the ClusteringModel.load method which uses pickle.loads(joblib.load(str(model_file))) to deserialize model files. This allows arbitrary Python code execution when loading a model, meaning an attacker could run malicious code with the same privileges as the process loading the model.

Detection Guidance

Check for installed Flair versions 0.15.0 or 0.15.1 using pip show flair. Inspect Python environments for the presence of flair/models/clustering.py. Monitor for unusual process activity during model loading, especially when loading untrusted model files.

Impact Analysis

If you use Flair versions 0.15.0 or 0.15.1 and load model files from untrusted sources, an attacker could exploit this to execute arbitrary code on your system. This could lead to data theft, system compromise, or further network infiltration depending on the privileges of the loading process.

Compliance Impact

This vulnerability allows arbitrary code execution during model loading, which could lead to unauthorized data access, modification, or exfiltration. For GDPR, this may violate principles of data integrity and confidentiality. For HIPAA, it could compromise protected health information integrity and security.

Mitigation Strategies

Upgrade Flair to a version beyond 0.15.1 where clustering support is fully removed. Avoid loading model files from untrusted sources. Remove any existing flair/models/clustering.py files manually if upgrading is not immediately possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76843. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart