CVE-2026-81726: NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots
(updated )
Several model-artifact APIs still treat caller-controlled model paths as ordinary filenames even when NLTK path security is enforced. The same outside-root paths are rejected by guarded helpers, but these public read and write flows still use raw file APIs.
References
- github.com/advisories/GHSA-8mgp-746c-j5xp
- github.com/nltk/nltk/commit/2a92b71827d754ae8920261e7ed0c4bb283ab2d7
- github.com/nltk/nltk/commit/a44a7af69bca87e92d9c4a701fcbbe4512e8d450
- github.com/nltk/nltk/commit/cbc98458b43de5f792f0382583c16df39e5c5117
- github.com/nltk/nltk/pull/3757
- github.com/nltk/nltk/pull/3759
- github.com/nltk/nltk/pull/3813
- github.com/nltk/nltk/security/advisories/GHSA-8mgp-746c-j5xp
- github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2026-3740.yaml
- nvd.nist.gov/vuln/detail/CVE-2026-81726
- www.vulncheck.com/advisories/nltk-through-3.10.3-path-traversal-via-model-artifact-apis
Code Behaviors & Features
Detect and mitigate CVE-2026-81726 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →