Vulnerability · Published Aug 22, 2026 · Assigned by VulnCheck

CVE-2026-62384NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2

High 7.5

In plain English

A high-severity path traversal in nltk from nltk. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 51% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.7%top 48.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validation guard and are resolved to files outside the intended corpus root when accessed via frame_by_name(), _lu_file(), or doc() methods.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	nltk	no fix listed	DEBIAN-CVE-2026-62384
Debian:13	nltk	no fix listed	DEBIAN-CVE-2026-62384
Debian:14	nltk	3.10.3-1	DEBIAN-CVE-2026-62384
PyPI	nltk	3.10.2	GHSA-f833-7jw8-xwrv
PyPI	nltk	3.10.2	PYSEC-2026-3789
Ubuntu:26.10	nltk	no fix listed	UBUNTU-CVE-2026-62384

Affected products (as reported)

Vendor	Product	Versions
nltk	nltk	3.10.0 – before 3.10.2

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

GitHub Security Advisory (GHSA-f833-7jw8-xwrv) vendor-advisory
VulnCheck Advisory: NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2 third-party-advisory