CVE-2026-79657

creationtimestamp| type| source ---|---|--- 2026-08-25 14:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtvykcwfyn24 2026-08-25 21:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtwrt2mobg2t 2026-08-28 15:00:04+00:00| published-proof-of-concept|...

DEBIAN-CVE-2026-79657

NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer.execute and...

UBUNTU-CVE-2026-79657

NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer.execute and...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +931 more potentially affected by CVE-2026-79657 via nltk (>=2.0.4, <=3.10.2)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-79657 Source advisory: MEND:CVE-2026-79657...