Path Traversal in NLTK Downloader Package Metadata Allows Arbitrary File Write

🗓️ 19 Feb 2026 09:06:27Reported by optimus-fulcriaType

Path traversal in downloader metadata enables arbitrary file writes during download; distinct from zip slip.

Reporter	Title	Published	Views	Family All 41
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in NLTK bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage	17 Jun 202613:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	7 Apr 202607:08	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	27 Apr 202607:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to code injection in NLTK [CVE-2025-14009]	14 Apr 202615:19	–	ibm
Huntr	Zip Slip Vulnerability in NLTK Downloader Leading to Remote Code Execution	13 Nov 202517:44	–	huntr
ATTACKERKB	CVE-2025-14009	18 Feb 202617:45	–	attackerkb
AlpineLinux	CVE-2025-14009	18 Feb 202617:45	–	alpinelinux
Information Security Automation	March Linux Patch Wednesday	30 Mar 202620:00	–	avleonov
BDU FSTEC	The vulnerability of the _unzip_iter() function in the Natural Language Processing and symbolic processing library package NLTK allows a hacker to execute arbitrary code.	1 Apr 202600:00	–	bdu_fstec
Chainguard	CVE-2025-14009 vulnerabilities	24 Feb 202619:30	–	cgr