Skip to content
fr Sign in
7.5 High

CVE-2026-33231 NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research…

Description

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, `nltk.app.wordnet_app` allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when it is started in its default mode. A simple `GET /SHUTDOWN%20THE%20SERVER` request causes the process to terminate immediately via `os._exit(0)`, resulting in a denial of service. Commit bbaae83db86a0f49e00f5b0db44a7254c268de9b patches the issue.

Affected products and versions

Product Affected versions Fixed in
Red Hat OpenShift AI 2.25 1787330903 earliest → < 1787330903 1787330903
Red Hat OpenShift AI 3.3 1782471606 earliest → < 1782471606 1782471606
Lightspeed Core Versions not published
OpenShift Lightspeed Versions not published
Red Hat Ansible Automation Platform 2 Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published
nltk 3.9 earliest → 3.9.3 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat OpenShift AI 2.25

The 140 CVEs of Red Hat OpenShift AI 2.25 →
CVE-2026-86332 A flaw was found in odh-dashboard in Red Hat OpenShift AI 6.5 Medium CVE-2026-18620 A flaw was found in Data Science Pipelines 7.1 High CVE-2026-18618 A flaw was found in ml-metadata 7.5 High CVE-2026-18611 A flaw was found in the Data Science Pipelines Operator 7.5 High
Track this CVE