By vendor

Nltk vulnerabilities

Known CVEs affecting Nltk products, prioritized by severity, with SEC.co remediation and detection guidance.

1 published vulnerability

• CVE-2026-54293HIGH 7.5

  NLTK, a popular Python library for natural language processing, contains a path traversal vulnerability in its file-loading mechanism. When using the special `nltk:` URL scheme to load data, an attacker can read arbitrary files from a vulnerable system by encoding path traversal sequences (like forward slashes and dots) as URL hex codes. This bypasses NLTK's documented security checks because the library validates the path before decoding these hex sequences, leaving a window for manipulation. The vulnerability affects all versions before 3.10.0-rc1.