CVE-2026-126295 · Package
NO FIX YET · SEE WHAT TO DO
NLTK versions from 3.10.0 before 3.10.4 do not validate model paths passed to BllipParser, so files outside NLTK data directories can be opened. An attacker who controls parser_model, reranker_features, reranker_weights, or from_unified_model_dir() input can read sensitive files or make the process hang on FIFOs and devices.
first public Oct 26, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Applications that use NLTK's BllipParser and pass model paths that come from users or other untrusted input are exposed. Pipelines that only load fixed, locally chosen model files are unlikely to be affected. unknown whether other NLTK components are involved.
Not affected if fixed-model-paths, no-bllipparser-use
Who cares nltk, python
pip show nltk and look for versions from 3.10.0 up to but not including 3.10.4.BllipParser, from_unified_model_dir, parser_model, reranker_features, or reranker_weights that take input from users or other untrusted sources.NLTK from 3.10.0 before 3.10.4 contains an arbitrary file read vulnerability in BllipParser that allows attackers to open files outside NLTK data roots by supplying unvalidated model paths. Attackers controlling parser_model, reranker_features, reranker_weights, or from_unified_model_dir() input can make the bllipparser C extension read sensitive files or block on FIFOs and devices.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
3.10.4 or later (from the advisory range).