The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(model_file))) and so executes arbitrary Python while loading a model file. Loading a model supplied by an attacker therefore runs that attacker's code with the privileges of the loading process. This is the same sink and the same file as CVE-2024-10073, which records 0.15.0 as the fixed version on the basis that clustering support was dropped in that release; the module was removed from the documented API but remains present in the distributed artifact and reachable by importing flair.models.clustering directly, so the earlier record's fixed version does not hold for the shipped package.

CVE-2026-76843 describes an arbitrary code execution vulnerability in the Flair NLP library versions 0.15.0 and 0.15.1. The vulnerability exists in flair/models/clustering.py, where the ClusteringModel.load static method uses pickle.loads(joblib.load()) to deserialize model files, enabling arbitrary Python code execution. Although clustering support was nominally dropped in version 0.15.0 (which was listed as the fix for the related CVE-2024-10073), the vulnerable module remains present in the distributed package and is directly importable via flair.models.clustering. An attacker who supplies a malicious model file can execute arbitrary code with the privileges of the loading process. This effectively invalidates the previously claimed fix in CVE-2024-10073, as the vulnerable code path persists in the shipped artifacts on PyPI.