Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer._execute and numpy.f2py.crackfortran.myeval through pickle REDUCE to execute arbitrary commands during model or tokenizer artifact loading.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-08-25 | 2 | Disclosure2 |
| 2026-08-30 | 1 | Patch1 |
| 2026-09-02 | 1 | Patch1 |
HojiChar v0.17.3 is out! Following the critical NLTK remote code executuion disclosure (CVE-2026-79657), we moved fast and replaced our only NLTK usage with equivalent local code with preserving behavior and performance. https://github.com/HojiChar/HojiChar/releases/tag/v0.17.3
Post summary
HojiChar released v0.17.3, patching the critical NLTK CVE‑2026‑79657 by removing the vulnerable library and replacing it with equivalent local code.
🚨 CRITICAL: CVE-2026-79657 (CVSS 9.8) NLTK <3.10.3 allows remote code execution via malicious pickle payloads. Attackers exploit unsafe deserialization to execute arbitrary commands during model loading. Update immediately. #CVE #Vulnerability #PatchNow https://t.co/w49BytlWBC
Post summary
The tweet announces the critical CVE‑2026‑79657 affecting NLTK, detailing RCE via unsafe pickle deserialization and urging users to update immediately.
🔐🚨 NLTK Mass Disclosure — 4 CVEs, CVSS 9.8 PEAK CVE-2026-79657 (9.8): Allowlisted pickle RCE → https://threataft.com/articles/nltk-mass-disclosure-4-cves #cybersecurity #infosec #NLTK #Python #NLP #ML #SupplyChain #RCE #ThreatIntel
Post summary
The post announces the disclosure of CVE-2026-79657 with a CVSS score of 9.8, describing it as an allowlisted pickle RCE. No exploit, patch, or active exploitation details are given, but a link to a fuller article is provided.
🚨Critical - NLTK RCE via allowlisted pickle namespace bypass (CVE-2026-79657) NLTK’s allowlisted pickle loaders trust entire module namespaces instead of specific safe callables. A crafted pickle can abuse REDUCE to invoke dangerous callables (e.g., ReppTokenizer._execute or numpy.f2py.crackfortran.myeval) when loading model/tokenizer artifacts, leading to arbitrary command execution. 👉Affected: nltk < 3.10.3 | Upgrade to 3.10.3
Post summary
The message announces CVE-2026-79657 as a critical NLTK remote‑code‑execution flaw using malicious pickles, explains how it works, and recommends upgrading to 3.10.3, but no proof of concept, exploit tool, or active exploitation is cited.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nltk | nltk | - | - | - |