CVE-2026-79676Medium· 5.9▾ SunlitA flaw was found in NLTK. This path traversal vulnerability allows attackers to bypass security measures by using symbolic links within trusted data roots. By staging specially crafted symlinked corpus files, an attacker can disclose sensi…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 2.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.3%
high → none
none → high
high → none
none → high
high → none
none → high
high → none
none → high
high → none
none → high
0.3% → 0.4%
Last analysed / modified upstream
— → 5.9
high → medium
A flaw was found in NLTK. This path traversal vulnerability allows attackers to bypass security measures by using symbolic links within trusted data roots. By staging specially crafted symlinked corpus files, an attacker can disclose sensitive information from outside the intended data directories. This could lead to unauthorized access to confidential data.
nltk: NLTK: Information disclosure via path traversal with symlink bypass — rated Moderate by Red Hat. Released 2026-08-25, updated 2026-10-15.
Affected:
No fix planned:
Out of support scope
Workarounds / mitigations:
Affected packages:
nltk < 3.10.3Patched in:
nltk 3.10.3Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109956High· 7.0NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths
CVE-2026-80206Medium· 5.9nltk: NLTK: Denial of Service vulnerability in tgrep module (CVE-2026-80206)
CVE-2026-114140High· 7.8nbconvert: nbconvert: arbitrary file write via path traversal in ExtractOutputPreprocessor (CVE-2026-114140)
CVE-2026-78679Medium· 6.5GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe option guard
CVE-2026-73619Medium· 6.5gitpython: GitPython: Arbitrary file read vulnerability via `Repo.archive()` (CVE-2026-73619)
CVE-2026-22702Medium· 4.5virtualenv: virtualenv: Local attacker can redirect file operations via TOCTOU race condition (CVE-2026-22702)