CVE-2026-3071 Details
Description
Deserialization of untrusted data in the LanguageModel class of Flair from versions 0.4.1 to latest are vulnerable to arbitrary code execution when loading a malicious model.
A vulnerability allowing arbitrary code execution has been identified in the Flair library's LanguageModel class, present in versions 0.4.1 through the latest release. This issue arises from the deserialization of untrusted data in the load_language_model method, where torch.load() is called with the weights_only parameter set to False. This configuration is unsafe because it allows PyTorch to execute arbitrary code by relying on Python's pickle module for object deserialization. The vulnerability can be exploited if an attacker controls the model file path.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Feb 26, 2026CISA-ADP
Assessed Feb 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.hiddenlayer.com/sai-security-advisory/2026-02-flair | CISA-ADP | AdvisoryExploitRemedy |
| https://www.hiddenlayer.com/sai-security-advisory/2026-02-flair | HiddenLayer | AdvisoryExploitRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | HiddenLayer |
Affected Products
| Product | Versions |
|---|---|
| Flair | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | HiddenLayer |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Feb 27, 2026 | CVE Modified | CISA-ADP |
| Feb 26, 2026 | New CVE Received | HiddenLayer |