{"id":"CVE-2026-81726","aliases":[],"cve":{"records":[{"id":"CVE-2026-81726","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-08-27T11:15:29.420Z","published":"2026-08-27T14:51:18.838Z","modified":"2026-10-30T10:43:25.836Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-10-30T10:43:25.836Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-08-27T19:29:23.489Z"}],"references":[{"url":"https://github.com/nltk/nltk/security/advisories/GHSA-8mgp-746c-j5xp","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/nltk-through-3.10.3-path-traversal-via-model-artifact-apis","tags":["third-party-advisory"],"source":"VulnCheck"},{"url":"https://github.com/nltk/nltk/security/advisories/GHSA-8mgp-746c-j5xp","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-73","description":"External Control of File Name or Path","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nltk:nltk:*:*:*:*:*:*:*:*","versionEndIncluding":"3.10.3"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-08-27T19:29:05.374521Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"NLTK through 3.10.3 Path Traversal via Model-Artifact APIs","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagger, and maxent parameter APIs when pathsec is enabled.","score":8.3,"severity":"high","published":"2026-08-27T14:51:18.838Z","modified":"2026-10-30T10:43:25.836Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"nltk","name":"nltk","platforms":[],"versions":[{"version":"0","status":"affected","lessThanOrEqual":"3.10.3","versionType":"semver"},{"version":"3.10.4","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:pypi/nltk","packageIdentity":{"ecosystem":"PyPI","name":"nltk"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-81726"}],"remediation":[],"references":["https://github.com/nltk/nltk/security/advisories/GHSA-8mgp-746c-j5xp","https://www.vulncheck.com/advisories/nltk-through-3.10.3-path-traversal-via-model-artifact-apis"],"sources":[{"name":"CVE","id":"CVE-2026-81726","modified":"2026-10-30T10:43:25.836Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-81726"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N","score":8.3},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","score":7}],"sourceAffected":[],"observedAt":"2026-10-30T10:51:29.526Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T10:20:31.211Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T10:55:31.792Z","attemptedAt":"2026-10-30T10:55:31.792Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-30T10:55:31.681Z","attemptedAt":"2026-10-30T10:55:31.681Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T10:55:33.238Z","attemptedAt":"2026-10-30T10:55:33.238Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-30T10:55:33.238Z","attemptedAt":"2026-10-30T10:55:33.238Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-8mgp-746c-j5xp","url":"https://github.com/advisories/GHSA-8mgp-746c-j5xp","modified":"2026-09-02T14:35:05Z","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","checkedAt":"2026-10-30T10:55:31.681Z"},{"source":"NVD","id":"CVE-2026-81726","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81726","modified":"2026-08-31T19:06:49.993","score":8.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-10-30T10:55:31.792Z"},{"source":"NVD","id":"CVE-2026-81726","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81726","modified":"2026-08-31T19:06:49.993","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","checkedAt":"2026-10-30T10:55:31.792Z"},{"source":"ENISA EUVD","id":"EUVD-2026-67076","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-67076","modified":"Aug 27, 2026, 7:29:23 PM","score":8.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N","checkedAt":"2026-10-30T10:55:33.238Z"},{"source":"FIRST EPSS","id":"CVE-2026-81726","url":"https://www.first.org/epss/","probability":0.00339,"percentile":0.27352,"date":"2026-10-29","checkedAt":"2026-10-30T10:55:33.238Z"}],"aiSummary":{"text":"NLTK through version 3.10.3 has a path traversal vulnerability in model-artifact APIs, allowing attackers to read or write files outside allowed sandbox roots. This occurs when pathsec is enabled and attackers use TransitionParser, AveragedPerceptron, PerceptronTagger, and maxent parameter APIs. Attackers must have access to these APIs to exploit the vulnerability.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T10:56:06.202Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-81726"}]}}