CVE-2026-109956 NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path

NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the modelfilename or model argument can make the weka JVM write files via -d or probe files via -l...

CVE-2026-109956 NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path

NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the modelfilename or model argument can make the weka JVM write files via -d or probe files via -l...

CVE-2026-109956 NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path

NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the modelfilename or model argument can make the weka JVM write files via -d or probe files via -l...

CVE-2026-109956

NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the modelfilename or model argument can make the weka JVM write files via -d or probe files via -l...

Natural Language Toolkit path traversal vulnerability

NLTK versions 3.10.3 and earlier have a path traversal vulnerability. This vulnerability arises from WekaClassifier not verifying the model path. Attackers can bypass the nltk.pathsec restriction by controlling the modelfilename or model parameter, allowing for path traversal. This may result in...