CVE-2024-10073

CVE-2024-10073 is a critical code injection vulnerability found in the ClusteringModel function within the flair/models/clustering.py file of flairNLP flair version 0.14.0. This flaw allows for remote code execution. While the attack complexity is high and exploitability is difficult, public exploit code exists. The CVSS score is 7.5 (HIGH), indicating significant impact (confidentiality, integrity, availability) if successfully exploited, though user interaction is required. Despite public disclosure, there is no evidence of active exploitation, Metasploit modules, or significant community discussion.