CVE-2026-79657

The record

NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer._execute and numpy.f2py.crackfortran.myeval through pickle REDUCE to execute arbitrary commands during model or tokenizer artifact loading.

Affected packages

Related vulnerabilities

• CVE-2026-78683 NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization… CWE-502
• CVE-2026-47058 Vulnerability in Oracle Java SE (component: Scripting). CWE-502
• CVE-2026-12484 A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of… CWE-502
• CVE-2026-50509 Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an… CWE-502
• CVE-2026-12481 A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution… CWE-502
• CVE-2026-55153 mchange-commons-java is a Java library of shared utility classes used by mchange projects… CWE-502
• CVE-2026-46386 OpenProject is open-source, web-based project management software. CWE-502
• CVE-2026-57527 Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure… CWE-502