CVE-2026-78680

The record

NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent._repr_svg_, allowing attackers to execute arbitrary code by placing a malicious dot binary in the search path or current working directory. Attackers can exploit bare-name binary resolution on Windows via the current working directory or on Unix-like systems via relative PATH entries to execute their binary instead of the legitimate Graphviz tool.

Affected packages

Related vulnerabilities

• CVE-2026-14673 Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE… CWE-426
• CVE-2026-57097 Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a… CWE-426
• CVE-2026-46710 Notepad++ is a free and open-source source code editor. CWE-426
• CVE-2026-45792 rtk filters and compresses command outputs before they reach your LLM context. CWE-426
• GHSA-rx78-29qr-5hq8 OpenClaw: Workspace-derived service PATH could influence trash command selection CWE-426
• GHSA-wc84-j36w-pw4x OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots CWE-426
• GHSA-24vr-rprv-67rf OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install CWE-426
• GHSA-fq9j-vw4w-fr6v OpenClaw: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution CWE-426