CVE-2026-62384CWE-22path-traversal

CVE-2026-62384

High · published August 22, 2026

CVSS v3.1

7.5

EPSS

Percentile

50.6

In the wild

Unconfirmed

What it is

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validation guard and are resolved to files outside the intended corpus root when accessed via frame_by_name(), _lu_file(), or doc() methods.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: 8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00651 · 50.6th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2026-08-22T19:16Z

Affected products (1)

Product	Versions	Fixed in
nltk/nltk	≥ 3.10.0, < 3.10.2	3.10.2

References (3)

https://github.com/nltk/nltk/security/advisories/GHSA-f833-7jw8-xwrv · [email protected]https://www.vulncheck.com/advisories/nltk-framenetcorpusreader-symlink-sandbox-bypass-before · [email protected]https://github.com/nltk/nltk/security/advisories/GHSA-f833-7jw8-xwrv · 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS history

Timeline

22 AUG 14:12Z
NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2
cvelistv5