EUVD-2026-125225

NLTK before 3.10.4 contains a path traversal vulnerability in savemaxentparams and loadmaxentparams that bypasses the pathsec filesystem restriction mechanism. Attackers who control the tabdir argument can read or overwrite model parameter files outside permitted data roots, because the functions...

CVE-2026-126296

The NLTK library (versions before 3.10.4 ) is vulnerable to a path traversal vulnerability within the save_maxent_params() and load_maxent_params() functions. The root cause is the direct use of Python's built-in open() function, which allows an attacker who controls the tab_dir argument to bypas...

CVE-2026-126296 NLTK before 3.10.4 Path Traversal via save_maxent_params and load_maxent_params

NLTK before 3.10.4 contains a path traversal vulnerability in savemaxentparams and loadmaxentparams that bypasses the pathsec filesystem restriction mechanism. Attackers who control the tabdir argument can read or overwrite model parameter files outside permitted data roots, because the functions...