CVE-2026-12072

A path-traversal vulnerability in "NKJPCorpusReader" allows an attacker who can influence the "fileids" argument of its public read methods "header", "raw", "words", "sents", "taggedwords" to read files outside the corpus root. The reader builds the file path with no containment check and opens i...