Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitize or validate file paths, enabling attackers to traverse directories and access sensitive files on the server. This issue is particularly critical in scenarios where user-controlled file inputs are processed, such as in machine learning APIs, chatbots, or NLP pipelines. Exploitation of this vulnerability can lead to unauthorized access to sensitive files, including system files, SSH private keys, and API tokens, and may potentially escalate to remote code execution when combined with other vulnerabilities.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-04 | 2 | Disclosure2 |
| 2026-03-05 | 2 | Disclosure2 |
| 2026-03-07 | 1 | Disclosure1 |
| 2026-03-09 | 1 | General1 |
| 2026-03-14 | 2 | Disclosure1Patch1 |
| 2026-03-16 | 1 | Disclosure1 |
| 2026-06-16 | 1 | Disclosure1 |
🚨 URGENT SECURITY PATCH FOR MAGEIA 9 USERS 🚨 A new path traversal vulnerability (CVE-2026-0847) has been discovered in the popular #Python Natural Language Toolkit (NLTK). Read more: 👉 https://tinyurl.com/chrh5ckn #Security #Mageia https://t.co/zlY6oJedYa
Post summary
The post announces an urgent patch for Mageia 9 due to a newly discovered path traversal flaw in NLTK and directs readers to a link for further details.
New security insights: Critical Analysis CVE-2026-0847 - A vulnerability in NLTK versions up to and.... Fresh perspectives on defensive strategies. Read more: https://threatops.tech/blog/critical-analysis-cve-2026-0847-a-vulnerability-in-nltk-versions-up-to-and-including-392-a-m
Post summary
The text points to a blog article about CVE-2026-0847 but does not provide actionable or technical details, exploit code, or patch information.
[CVE-2026-0847: HIGH] Critical vulnerability in NLTK versions allows arbitrary file read via path traversal in CorpusReader classes, enabling attackers to access sensitive files and potentially escalate to rem...#cve,CVE-2026-0847,#cybersecurity https://cvefind.com/CVE-2026-0847
Post summary
The tweet announces CVE‑2026‑0847 as a high‑severity path‑traversal flaw in NLTK that allows arbitrary file reads, but provides no PoC, exploit, or mitigation details.
CVE-2026-0847 A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReade… https://www.cve.org/CVERecord?id=CVE-2026-0847
Post summary
The CVE describes a path‑traversal flaw that enables arbitrary file reads in NLTK up to version 3.9.2, without mentioning a PoC, exploit code, or active exploitation.
🔴 NLTK, Path Traversal, #CVE-2026-0847 (High) -DC-Jun2026-476 https://dailycve.com/nltk-path-traversal-cve-2026-0847-high-dc-jun2026-476/
Post summary
The text announces a high‑severity Path Traversal flaw (CVE‑2026‑0847) in NLTK.
Just published: Critical Analysis CVE-2026-0847 - A vulnerability in NLTK versions up to and.... Practical security guidance from the trenches. Read more: https://threatops.tech/blog/critical-analysis-cve-2026-0847-a-vulnerability-in-nltk-versions-up-to-and-including-392-a-march
Post summary
A blog post announces CVE-2026-0847, a vulnerability in NLTK affecting versions up to 3.9.2, but provides no PoC, exploit code, active exploitation evidence, or patch information.
New security insights: Critical Analysis CVE-2026-0847 - A vulnerability in NLTK versions up to and.... Fresh perspectives on defensive strategies. Read more: https://threatops.tech/blog/critical-analysis-cve-2026-0847-a-vulnerability-in-nltk-versions-up-to-and-including-392-a-m
Post summary
The post provides a brief mention of CVE‑2026‑0847 affecting NLTK versions, framing it as a new vulnerability but offers no PoC, exploit details, patch info or evidence of active exploitation.
A critical vulnerability (CVE-2026-0847) has been identified in the widely used Python NLP library NLTK. The issue affects versions up to 3.9.2 and could potentially allow remote code execution if malicious packages are downloaded and extracted without proper validation—a risk for many AI/ML pipelines relying on automated model downloads. https://threatops.tech/blog/critical-analysis-cve-2026-0847-a-vulnerability-in-nltk-versions-up-to-and-including-392-a-march-7-2 #CyberSecurity, #PythonSecurity, #NLTK, #CVE, #AIsecurity, #MachineLearningSecurity, #ThreatResearch, #ThreatOps, #AppSec, #Infosec
Post summary
A new CVE (CVE-2026-0847) in NLTK that potentially allows remote code execution via unvalidated package downloads has been identified, with affected versions up to 3.9.2; no active exploitation, patch, or PoC details are provided.
🟠 CVE-2026-0847 - High A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, a... https://www.thehackerwire.com/vulnerability/CVE-2026-0847/ https://t.co/GvO4ZCHw6q
Post summary
The text announces CVE‑2026‑0847, a path‑traversal vulnerability in NLTK up to version 3.9.2 that permits arbitrary file reads, without mentioning PoC, exploitation, or patches.
CVE-2026-0847 Path Traversal Vulnerability in NLTK Corpus Readers Enabling Arbitrary File Read https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0847
Post summary
The text announces CVE-2026-0847 as a path‑traversal flaw in NLTK Corpus Readers that permits arbitrary file reads, but it provides no evidence of exploits, PoCs, or patches.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nltk | nltk | - | - | - |