CVE-2026-126302 · Package
NO FIX YET · SEE WHAT TO DO
NLTK versions from 3.9.4 before 3.10.4 have a flaw in the chat80 sql_query() function that follows symbolic links and bypasses the data-root sandbox check. An attacker who can write into a trusted NLTK data directory can plant a symlink and read SQLite databases located outside that sandbox.
first public Oct 26, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Only applications that use NLTK's chat80 sql_query() function and keep NLTK data in a directory where untrusted users can write. Systems that do not call this function or do not share writable data roots are unlikely to be exposed.
Not affected if chat80-unused, read-only-data-root
Who cares nltk, python
pip show nltk and check whether the version is at least 3.10.4.nltk.sem.chat80.sql_query() with data paths that other users or processes can write to.3.10.4 or later (from the NVD range 3.9.4 before 3.10.4).NLTK from 3.9.4 before 3.10.4 contains a symlink following vulnerability in nltk.sem.chat80.sql_query() that bypasses the pathsec data-root sandbox containment check. Attackers who can write into a trusted NLTK data root can plant a symbolic link to read SQLite databases outside the sandbox.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.