CVE-2026-62383CWE-22path-traversal

CVE-2026-62383

Medium · published August 22, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely. Attackers can place a symlink in the corpus root directory and read arbitrary files accessible to the process by calling channels(), domains(), categories(), or fileids() methods with the symlink filename.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
6.8 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00183 · 7.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-22T19:16Z
Affected products (1)
ProductVersionsFixed in
nltk/nltk≥ 3.10.0, < 3.10.23.10.2
References (2)
https://github.com/nltk/nltk/security/advisories/GHSA-3hhw-38pf-pxj6 · [email protected]https://www.vulncheck.com/advisories/nltk-ipipancorpusreader-symlink-arbitrary-file-read · [email protected]
EPSS history
Timeline
  • 22 AUG 14:12Z
    nltk IPIPANCorpusReader Symlink Arbitrary File Read
    cvelistv5