PT-2026-79557 · Pypi · Nltk
CVSS v4.0
6.8
Medium
| Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
nltk versions prior to 3.10.2
Description
An arbitrary file read issue exists in the
IPIPANCorpusReader methods that bypasses nltk.pathsec validation. An attacker can place a symlink in the corpus root directory to read arbitrary files accessible to the process by calling the channels(), domains(), categories(), or fileids() methods using the symlink filename.Recommendations
Update nltk to version 3.10.2 or later.
Exploit
Fix
Link Following
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Nltk