Live › vulnerability › CVE-2026-112079
Go to dashboardHanLP, a Python natural language processing library, has an unsafe deserialization flaw in its load_word2vec_as_vocab_tensor function when handling the vectors.vocab argument. A remote attacker can supply a crafted model file so that loading it runs attacker-chosen code on the machine that loads it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that use HanLP up to 2.1.0-beta.64 and load word2vec vocabulary or model files, especially ones that come from outside the team. Applications that only use HanLP with their own trusted models, or that do not load word2vec vectors, are less exposed. The sources do not say which pipelines reach this function by default.
No product ranges from the sources yet.
pip show hanlp to read the installed versionload_word2vec_as_vocab_tensor or word2vec models loaded from untrusted sources2.1.0-beta.64; no fixed version is named in the sourcesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load_word2vec_as_vocab_tensor of the file hanlp/utils/torch_util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-112079")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.