Read the docs

Flair

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Flair records in CISA KEV

No Flair vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-02655 CVE-2026-3071 · GHSA-6v6h-v95w-6g6x

Deserialization of untrusted data in Flair

Priority HIGH 72

Deserialization of untrusted data in the LanguageModel class of Flair from versions 0.4.1 to latest are vulnerable to arbitrary code execution when loading a malicious model.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00179 Published 2026-02-26 No fix listed CWE-502
Open these records in search →