VDB
CVE-2026-62384
CVE-2026-62384
PUBLISHED
CVSS 8.7 HIGH
Reported by VulnCheck · Published August 22, 2026
NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validation guard and are resolved to files outside the intended corpus root when accessed via frame_by_name(), _lu_file(), or doc() methods.
Risk Scores
CVSS 4.0
8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| nltk | nltk | 3.10.0, 3.10.2 |
| nltk | nltk | 3.10.0, 3.10.2, 3.10.0 |
| PyPI | nltk | 3.10.0 |
Timeline
- Aug 22, 2026 CVE Published
- Aug 23, 2026 EPSS Score
- Aug 24, 2026 EPSS Score
- Aug 26, 2026 EPSS Score
- Aug 30, 2026 EPSS Score
- Sep 3, 2026 EPSS Score
- Sep 3, 2026 Security Advisory
- Sep 5, 2026 EPSS Score
- Sep 6, 2026 EPSS Score
- Sep 9, 2026 EPSS Score
- Sep 12, 2026 EPSS Score
- Sep 16, 2026 EPSS Score
References
- GitHub Security Advisory (GHSA-f833-7jw8-xwrv) vendor-advisory
- VulnCheck Advisory: NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-62384 advisory
- https://github.com/advisories/GHSA-f833-7jw8-xwrv advisory
- https://github.com/nltk/nltk/pull/3726 patch
- https://github.com/nltk/nltk/commit/736d3212a47de2005b85b785dde6720556d3925d patch
- https://github.com/nltk/nltk/releases/tag/v3.10.2 url
- https://github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2026-3789.yaml advisory