CVE-2026-79676

creationtimestamp| type| source ---|---|--- 2026-09-01 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muhu5rfqm52l...

DEBIAN-CVE-2026-79676

NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open instead of nltk.pathsec.open, allowing symlinks to escape trusted roots. Attackers who stage symlinked corpus files under a trusted data root can disclose...