CVE-2026-62384

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-62384
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-62384.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-62384
Aliases
Downstream
Published
2026-08-22T14:12:37Z
Modified
2026-09-04T03:47:29Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2
Details

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validation guard and are resolved to files outside the intended corpus root when accessed via frame_by_name(), _lu_file(), or doc() methods.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/62xxx/CVE-2026-62384.json"
}
References

Affected packages

Git / github.com/nltk/nltk

Affected ranges

Type
GIT
Repo
https://github.com/nltk/nltk
Events
Introduced
bd49f9011d7dc8c6a36b3c4ae71f04060c9b3fb9
Fixed
474af1f5a94b1b8d53fc2b6defec3a2ce7633b74
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:nltk:nltk:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.10.0"
        },
        {
            "fixed": "3.10.2"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

v.*
v.3.10.1
v3.*
v3.10.0
v3.10.0-rc2
v3.10.1
v3.10.1-rc1
v3.10.1-rc2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-62384.json"