---
id: CVE-2026-62385
title: >-
  NLTK versions before 3.10.0 contain a path traversal vulnerability in
  FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML
  files outside the corpus root by supplying unsafe selectors or poisoned index
  state
summary: >-
  NLTK versions before 3.10.0 contain a path traversal vulnerability in
  FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML
  files outside the corpus root by supplying unsafe selectors or poisoned index
  state. Attac…
severity: medium
cvss: 5.9
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-73
  - CWE-22
  - CWE-706
vendor: nltk
product: nltk
affected:
  - nltk < 3.10.0
patched:
  - nltk 3.10.0
published: '2026-08-22'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-62385'
references:
  - url: 'https://github.com/nltk/nltk/security/advisories/GHSA-568f-pv23-39p4'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/nltk-path-traversal-via-framenet-and-nkjp-readers
    label: disclosure@vulncheck.com
  - url: 'https://github.com/nltk/nltk/security/advisories/GHSA-568f-pv23-39p4'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-62385'
  - url: 'https://github.com/nltk/nltk/pull/3579'
  - url: 'https://github.com/nltk/nltk/pull/3581'
  - url: >-
      https://github.com/nltk/nltk/commit/7d1389d0789c1eca56bd0ed444089e0a3972e3ed
  - url: >-
      https://github.com/nltk/nltk/commit/bf3bf32786791394a1008258b4917a7f2d4dbcda
  - url: 'https://github.com/nltk/nltk/releases/tag/v3.10.0'
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2026-3728.yaml
  - url: 'https://github.com/advisories/GHSA-568f-pv23-39p4'
  - url: 'https://github.com/nltk/nltk'
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-62385.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-62385'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2521333'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-62385'
tags:
  - nvd
  - ghsa
  - pip
  - osv
  - csaf
  - vex
  - red-hat
epss: 0.0042
epssPercentile: 0.36152
aliases:
  - GHSA-568f-pv23-39p4
  - PYSEC-2026-3728
ecosystem: pip
ingestedAt: '2026-08-23T04:42:15.201Z'
---

## Overview

NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned index state. Attackers can exploit frame_by_name, doc, lu, and header methods with crafted parameters to read arbitrary XML files accessible to the application.

## Affected

- `nltk < 3.10.0`

## Remediation

Upgrade past the affected range:

- `nltk 3.10.0`

## Package advisory (CVE-2026-62385)

Affected packages:

- `nltk <= 3.9.4`

Patched in:

- `nltk 3.10.0`

Source: https://github.com/advisories/GHSA-568f-pv23-39p4

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-10-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-62385.json)