CVE-2026-81726 - NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagger, and maxent parameter APIs when pathsec is enabled. - 漏洞详情

漏洞编号：CVE-2026-81726

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-81726

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-73

发布/更新时间：2026-08-27 / 2026-08-28

漏洞描述

NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagger, and maxent parameter APIs when pathsec is enabled.

漏洞描述

相关链接

相关漏洞