CVE-2026-81726: NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots
Several model-artifact APIs still treat caller-controlled model paths as ordinary filenames even when NLTK path security is enforced. The same outside-root paths are rejected by guarded helpers, but these public read and write flows still use raw file APIs.
References
- github.com/advisories/GHSA-8mgp-746c-j5xp
- github.com/nltk/nltk/commit/2a92b71827d754ae8920261e7ed0c4bb283ab2d7
- github.com/nltk/nltk/commit/a44a7af69bca87e92d9c4a701fcbbe4512e8d450
- github.com/nltk/nltk/commit/cbc98458b43de5f792f0382583c16df39e5c5117
- github.com/nltk/nltk/pull/3757
- github.com/nltk/nltk/pull/3759
- github.com/nltk/nltk/pull/3813
- github.com/nltk/nltk/security/advisories/GHSA-8mgp-746c-j5xp
- github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2026-3740.yaml
- nvd.nist.gov/vuln/detail/CVE-2026-81726
- www.vulncheck.com/advisories/nltk-through-3.10.3-path-traversal-via-model-artifact-apis
Code Behaviors & Features
Detect and mitigate CVE-2026-81726 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →