CyberRota Analysis
AI-GeneratedNLTK versions 3.9.4 through 3.10.2 are vulnerable to a path traversal issue in the CrubadanCorpusReader, allowing an attacker to disclose file contents outside the designated corpus root by manipulating the corpus table.txt mapping file. This vulnerability primarily affects users who manage corpus packages, as it enables unauthorized access to specific files ending in -3grams.txt. Organizations utilizing these NLTK versions should prioritize patching to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams joins the corpus root with crubadan_code, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open() rather than the pathsec-validated opener, so os.path.join discards the root when that value is absolute and the read escapes the corpus directory without the containment check nltk.pathsec applies when ENFORCE is set. An attacker who controls a corpus package can disclose file contents outside the corpus root through lang_freq, limited to paths ending in -3grams.txt whose contents parse as token count lines.
Related CVEs
Other vulnerabilities affecting the same vendor(s)