This vulnerability affects the Load function in the Model Loader component of piskvorky gensim (up to version 4.4.0). The issue arises from unsafe deserialization caused by manipulation of the fname argument, specifically through the use of pickle.load without adequate safeguards. The flaw can be exploited remotely. Despite public disclosure and availability of exploit code, the maintainer closed the related issue without providing a fix or comment, and the unsafe code remains in the develop branch as of the last repository update on 2025-11-01.

Successful exploitation could allow an attacker to execute arbitrary code remotely by leveraging unsafe deserialization in the Load function. This could lead to compromise of the system running the vulnerable gensim version. The CVSS 4.0 score is 5.1 (medium), reflecting network attack vector, low attack complexity, and partial impacts on confidentiality, integrity, and availability.

No official fix or patch is currently available. Users should avoid using the vulnerable Load function with untrusted input. Monitor the vendor repository and advisories for updates. Consider implementing application-level controls to restrict or validate inputs to the Load function to mitigate risk until a patch is released.