CERT24CVE-2026-81726 — NLTK through 3.10.3: Path traversal via model-artifact APIsLoading data…
CERT24Threat Observatory
Period

CVE-2026-81726 — NLTK through 3.10.3: Path traversal via model-artifact APIs

NLTK model-artifact APIs may allow caller-controlled paths to read or write files outside allowed sandbox roots even when pathsec enforcement is enabled. The source states that versions through 3.10.3 are affected; published 3.9.4 and source version v3.10.0-rc2 were reproduced. No patched versions are identified in the source. The advisory was withdrawn because it duplicates GHSA-8mgp-746c-j5xp.

← Back to intelligence

CVE-2026-81726 — NLTK through 3.10.3: Path traversal via model-artifact APIs

NLTK model-artifact APIs may allow caller-controlled paths to read or write files outside allowed sandbox roots even when pathsec enforcement is enabled. The source states that versions through 3.10.3 are affected; published 3.9.4 and source version v3.10.0-rc2 were reproduced. No patched versions are identified in the source. The advisory was withdrawn because it duplicates GHSA-8mgp-746c-j5xp.