CVE-2026-79657

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3

Description Allowlisted pickle loaders trust entire module namespaces instead of specific safe callables. This allows attackers to craft malicious pickle payloads that use the pickle REDUCE mechanism to invoke dangerous in-namespace functions, such as ReppTokenizer. execute and numpy.f2py.crackfortran.myeval, resulting in remote code execution during the loading of model or tokenizer artifacts.

Recommendations Update NLTK to version 3.10.3.