PYSEC-2026-2237

🗓️ 20 Mar 2026 23:16:47Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 3 Views

NLTK downloader lacks XML index validation, enabling path traversal to create or overwrite files.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a path traversal in NLTK [CVE-2026-33236]	21 May 202615:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	8 Jun 202607:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to XSS (CVE-2026-33230), denial of service (CVE-2026-33231, GHSA-rf74-v2fm-23pw) and path traversal (CVE-2026-33236)	26 Mar 202616:02	–	ibm
ATTACKERKB	CVE-2026-33236	20 Mar 202622:47	–	attackerkb
Chainguard	CVE-2026-33236 vulnerabilities	26 Mar 202601:17	–	cgr
Circl	CVE-2026-33236	18 Mar 202612:18	–	circl
CNNVD	NLTK 路径遍历漏洞	20 Mar 202600:00	–	cnnvd
CVE	CVE-2026-33236	20 Mar 202622:47	–	cve
Cvelist	CVE-2026-33236 NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite	20 Mar 202622:47	–	cvelist
Debian CVE	CVE-2026-33236	20 Mar 202622:47	–	debiancve

Vulners

Node

pypi nltkRange0–3.9.4

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-33236
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33236.json
access	www.access.redhat.com/errata/RHSA-2026:10184
access	www.access.redhat.com/errata/RHSA-2026:19712
access	www.access.redhat.com/errata/RHSA-2026:37275
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/nltk/nltk/commit/89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a
github	www.github.com/nltk/nltk/security/advisories/GHSA-469j-vmhf-r6v7

13 Jul 2026 05:50Current

7.1High risk

Vulners AI Score7.1

CVSS 3.18.1

EPSS0.00498

SSVC