Skip to content
OpenAdvisories

Vendor

nltk

45 known vulnerabilities.

Products

nltk 34 nltk/nltk 11
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-79657 Public exploit

    NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization

    NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace funct…

    nltk nltk nltk nltk Debian Ubuntu PyPI
  • Critical 10.0
    CVE-2026-0848 Public exploit

    Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading

    NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the …

    nltk nltk/nltk nltk nltk Debian Ubuntu PyPI
  • High 8.6
    CVE-2026-0847 Public exploit

    Path Traversal in nltk/nltk

    A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitiz…

    nltk nltk/nltk nltk nltk Debian Ubuntu PyPI