CVE-2026-79674
High · 8.2CVSS
8.2
EPSS
0.4%
Published
Aug 25, 2026
CISA due date
—
The record
NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root. Attackers can supply arbitrary corpus root paths to LinThesaurusCorpusReader and PanLexLiteCorpusReader constructors to access filesystem content and SQLite databases outside the pathsec sandbox boundary.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-78679 GitPython before 3.1.59 contains an arbitrary file read vulnerability in… CWE-73
- CVE-2026-78675 GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules… CWE-73
- CVE-2026-62385 NLTK versions before 3.10.0 contain a path traversal vulnerability in… CWE-73
- CVE-2026-76217 GitPython versions before 3.1.58 fail to validate options passed to git rm and git… CWE-73
- CVE-2026-73619 GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options… CWE-73
- CVE-2026-56390 GNU Bison improperly handles grammar‑defined output paths. CWE-73
- CVE-2026-50162 oras-go is a Go library for managing OCI artifacts. CWE-73
- CVE-2026-50462 External control of file name or path in Windows Ancillary Function Driver for WinSock… CWE-73