CVE-2026-79676 - NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead of nltk.pathsec.open(), allowing symlinks to escape trusted roots. Attackers who stage symlinked corpus files under a trusted data root can disclose outside-root content through normal corpus reader methods like channels(), domains(), and synonyms(). - 漏洞详情

漏洞编号：CVE-2026-79676

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2026-79676

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-22

发布/更新时间：2026-08-25 / 2026-08-28

漏洞描述

NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead of nltk.pathsec.open(), allowing symlinks to escape trusted roots. Attackers who stage symlinked corpus files under a trusted data root can disclose outside-root content through normal corpus reader methods like channels(), domains(), and synonyms().

漏洞描述

相关链接

相关漏洞