CVE-2026-62385
Medium · 5.9CVSS
5.9
EPSS
0.4%
Published
Aug 22, 2026
CISA due date
—
The record
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned index state. Attackers can exploit frame_by_name, doc, lu, and header methods with crafted parameters to read arbitrary XML files accessible to the application.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79674 NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader… CWE-73
- CVE-2026-78679 GitPython before 3.1.59 contains an arbitrary file read vulnerability in… CWE-73
- CVE-2026-78675 GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules… CWE-73
- CVE-2026-76217 GitPython versions before 3.1.58 fail to validate options passed to git rm and git… CWE-73
- CVE-2026-73619 GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options… CWE-73
- CVE-2026-56390 GNU Bison improperly handles grammar‑defined output paths. CWE-73
- CVE-2026-50162 oras-go is a Go library for managing OCI artifacts. CWE-73
- CVE-2026-50462 External control of file name or path in Windows Ancillary Function Driver for WinSock… CWE-73