CVE-2026-81726
Fixed in a distro release EPSS <1%CVSS 7.0
NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagger, and maxent parameter APIs when pathsec is enabled.
Products: nltk
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | nltk | no fix |
| PyPI | nltk | 3.10.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | apache-beam-python-3.11-sdk | 2.77.0-r2 |
| Chainguard | apache-beam-python-3.12-sdk | 2.77.0-r5 |
| Chainguard | apache-beam-python-3.13-sdk | 2.77.0-r5 |
| Chainguard | apache-beam-python-3.14-sdk | 2.77.0-r5 |
| Chainguard | label-studio | 1.23.2-r2 |
| Chainguard | nemo | no fix |
| Chainguard | nemo-skills | no fix |
| Chainguard | open-webui | 0.11.4-r0 |
| Chainguard | vllm-omni-cuda-13.0 | 0.30.0-r1 |
| Debian 12 | nltk | no fix |
| Debian 13 | nltk | no fix |
| Debian 14 | nltk | no fix |
| Ubuntu 26.10 | nltk | no fix |
| Ubuntu Pro 14.04 LTS | nltk | no fix |
| Ubuntu Pro 16.04 LTS | nltk | no fix |
| Ubuntu Pro 18.04 LTS | nltk | no fix |
| Ubuntu Pro 20.04 LTS | nltk | no fix |
| Ubuntu Pro 22.04 LTS | nltk | no fix |
| Ubuntu Pro 24.04 LTS | nltk | no fix |
| Ubuntu Pro 26.04 LTS | nltk | no fix |
| Wolfi | open-webui | 0.11.4-r0 |