CVE-2026-79674

creationtimestamp| type| source ---|---|--- 2026-09-01 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muhbppijgh2f 2026-09-08 18:35:17+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-3gq4-3j92-5w49...

DEBIAN-CVE-2026-79674

NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root. Attackers can supply arbitrary corpus root paths to LinThesaurusCorpusReader and PanLexLiteCorpusReader constructors to access...