Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root. Attackers can supply arbitrary corpus root paths to LinThesaurusCorpusReader and PanLexLiteCorpusReader constructors to access filesystem content and SQLite databases outside the pathsec sandbox boundary.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 NLTK, Path Sandbox Bypass, #CVE-2026-79674 (High) -DC-Sep2026-2229 https://dailycve.com/nltk-path-sandbox-bypass-cve-2026-79674-high-dc-sep2026-2229/
Post summary
The post announces CVE-2026-79674, a high‑severity path sandbox bypass vulnerability in the NLTK library, pointing to a dailyCVE article for further details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nltk | nltk | - | - | - |