CVE-2026-79674 - NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root. Attackers can supply arbitrary corpus root paths to LinThesaurusCorpusReader and PanLexLiteCorpusReader constructors to access filesystem content and SQLite databases outside the pathsec sandbox boundary. - 漏洞详情

漏洞编号：CVE-2026-79674

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-79674

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-73

发布/更新时间：2026-08-25 / 2026-08-28

漏洞描述

NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root. Attackers can supply arbitrary corpus root paths to LinThesaurusCorpusReader and PanLexLiteCorpusReader constructors to access filesystem content and SQLite databases outside the pathsec sandbox boundary.

漏洞描述

相关链接

相关漏洞