EUVD-2026-125216

NLTK from 3.10.0 before 3.10.4 contains a symlink escape vulnerability in YCOECorpusReader that allows attackers to read files outside the corpus root by planting psd or pos directory symlinks. Attackers controlling a YCOE corpus can make parsedsents and taggedwords return file content from other...

CVE-2026-126304 NLTK 3.10.0 before 3.10.4 Symlink Escape in YCOECorpusReader

NLTK from 3.10.0 before 3.10.4 contains a symlink escape vulnerability in YCOECorpusReader that allows attackers to read files outside the corpus root by planting psd or pos directory symlinks. Attackers controlling a YCOE corpus can make parsedsents and taggedwords return file content from other...

CVE-2026-126304

The NLTK library versions 3.10.0 before 3.10.4 are vulnerable to a symlink escape vulnerability within the YCOECorpusReader component (CWE-59). By planting psd or pos directory symlinks, an attacker who controls a YCOE corpus can bypass the corpus root to read files from other corpora or temporar...