CVE-2026-126304 · Package
NO FIX YET · SEE WHAT TO DO
NLTK versions from 3.10.0 before 3.10.4 have a symlink escape in the YCOECorpusReader class. An attacker who controls a YCOE corpus can plant psd or pos directory symlinks so that parsed_sents() and tagged_words() return contents of files outside the corpus root.
first public Oct 26, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that run NLTK 3.10.0 up to but not including 3.10.4 and load YCOE corpora from sources they do not fully control. Exposure depends on whether untrusted corpus files can reach the application's NLTK data path. Teams on other versions or using only trusted, locally built corpora can skip it.
Not affected if nltk-3.10.4-or-later, nltk-below-3.10.0, trusted-corpus-only
Who cares nltk, python
pip show nltk and see whether it is at least 3.10.4.psd or pos symlinks.3.10.4 or later.NLTK from 3.10.0 before 3.10.4 contains a symlink escape vulnerability in YCOECorpusReader that allows attackers to read files outside the corpus root by planting psd or pos directory symlinks. Attackers controlling a YCOE corpus can make parsed_sents() and tagged_words() return file content from other corpora or temporary files within the NLTK data sandbox.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.