https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-18T05:02:43.906461+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-81726 CVE-2026-81726 — NLTK through 3.10.3 Path Traversal via Model-Artifact APIs 2026-10-18T05:02:43.907478+00:00

Affected: nltk

NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagger, and maxent parameter APIs when pathsec is enabled.