---
id: "GHSA-g5wx-957h-f4wj"
page: "https://infrastack.ai/live/GHSA-g5wx-957h-f4wj"
kind: "vulnerability"
aliases: ["GHSA-g5wx-957h-f4wj"]
title: "Duplicate Advisory: Path Traversal in save_maxent_params / load_maxent_params Allow Arbitrary File READ/WRITE"
severity: "medium"
cvss: 4.8
epss: null
exploited: false
status: "withdrawn"
category: "package"
products: [{"name": "nltk", "fixed": [], "affected": "< 3.10.4", "ecosystem": "pypi"}]
ecosystems: ["pypi"]
tags: ["cwe-73", "nltk", "package", "python"]
not_affected_if: ["nltk-3.10.4-or-later", "no-external-tab-dir"]
published_at: "2026-11-13T12:31:16+00:00"
first_seen_at: "2026-11-13T21:45:25+00:00"
updated_at: "2026-11-13T21:46:18+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-g5wx-957h-f4wj", "first_seen_at": "2026-11-13T21:45:25+00:00"}]
exploit_sources: []
---

# Duplicate Advisory: Path Traversal in save_maxent_params / load_maxent_params Allow Arbitrary File READ/WRITE

Link for people: https://infrastack.ai/live/GHSA-g5wx-957h-f4wj (this .md is for agents)

This advisory was withdrawn as a duplicate of GHSA-59f9-gqg8-mqpj. The original text says NLTK before 3.10.4 lets an attacker who controls the tab_dir argument read or overwrite model parameter files outside permitted directories.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- pypi:nltk affected < 3.10.4 fixed no fixed version listed

## How to check

- Check the installed NLTK version with `pip show nltk`
- Look for calls to `save_maxent_params` or `load_maxent_params` in your code, where the directory path comes from outside input

## Fix

- `nltk` `3.10.4` (the version the affected range is below, per the product data)

## Timeline

- 2026-11-13T21:45:25+00:00 ghsa https://github.com/advisories/GHSA-g5wx-957h-f4wj

## From the sources

## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-59f9-gqg8-mqpj. This link is maintained to preserve external references.

## Original Description

NLTK before 3.10.4 contains a path traversal vulnerability in save_maxent_params() and load_maxent_params() that bypasses the pathsec filesystem restriction mechanism. Attackers who control the tab_dir argument can read or overwrite model parameter files outside permitted data roots, because the functions call Python's built-in open() directly.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_