CVE-2026-126304

The NLTK library versions 3.10.0 before 3.10.4 are vulnerable to a symlink escape vulnerability within the YCOECorpusReader component (CWE-59). By planting psd or pos directory symlinks, an attacker who controls a YCOE corpus can bypass the corpus root to read files from other corpora or temporar...