Description
A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load of the file recommenders/models/newsrec/io/mind_iterator.py of the component Dict Loading. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-09-23
Score: 5.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Deserialization Vulnerability
Action: Patch ASAP
AI Analysis

Impact

A deserialization flaw exists in the recommenders-team recommenders project, specifically within the pickle.load call in mind_iterator.py’s Dict Loading component. Based on the description, it is inferred that an attacker can supply crafted data that will be deserialized by the vulnerable pickle.load, potentially enabling the execution of arbitrary code on any system that uses the library. The flaw is triggered through remote manipulation of input data processed by the library, giving attackers a direct path to compromise the underlying environment.

Affected Systems

The vulnerability affects all installations of recommenders-team recommenders up to version 1.2.1. Users running any of these versions without an available patch are exposed. The project’s GitHub repository and issue tracker indicate that the issue was reported but no fix has been released yet.

Risk and Exploitability

The CVSS base score of 5.1 indicates a medium severity level, but the risk is amplified by the public availability of an exploit and the remote attack vector. Based on the description, it is inferred that the deserialization flaw could permit execution of arbitrary code. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Given the remote nature of the attack vector and the potential for code execution inferred from the deserialization flaw, users should consider the risk significant until a remediation is applied.

Generated by OpenCVE AI on September 23, 2026 at 04:21 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply any vendor patch or upgrade to a fixed version of recommenders once it becomes available.
  • If a patch is not yet published, restrict or validate all data passed to pickle.load to ensure only trusted, whitelisted payloads are deserialized, or replace the unsafe pickle loader with a safer alternative such as json or custom parsers.
  • Monitor application logs for unexpected deserialization activity and, if feasible, deploy network segmentation or firewall rules to limit exposure of services that load data using the vulnerable component.

Generated by OpenCVE AI on September 23, 2026 at 04:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 23 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 23 Sep 2026 02:00:00 +0000

Type Values Removed Values Added
Description A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load of the file recommenders/models/newsrec/io/mind_iterator.py of the component Dict Loading. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Title recommenders-team recommenders Dict Loading mind_iterator.py pickle.load deserialization
First Time appeared Recommenders-team
Recommenders-team recommenders
Weaknesses CWE-20
CWE-502
CPEs cpe:2.3:a:recommenders-team:recommenders:*:*:*:*:*:*:*:*
Vendors & Products Recommenders-team
Recommenders-team recommenders
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 5.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Recommenders-team Recommenders
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-23T13:52:54.612Z

Reserved: 2026-09-22T17:19:00.142Z

Link: CVE-2026-95928

cve-icon Vulnrichment

Updated: 2026-09-23T13:51:25.685Z

cve-icon NVD

Status : Deferred

Published: 2026-09-23T02:16:55.717

Modified: 2026-09-23T14:57:49.540

Link: CVE-2026-95928

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-23T09:11:05Z

Weaknesses
  • CWE-20

    Improper Input Validation

  • CWE-502

    Deserialization of Untrusted Data