Skip to content
fr Sign in
10.0 Critical

CVE-2026-0848 NLTK…

Description

NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of arbitrary Java bytecode at import time. This vulnerability can be exploited through methods such as model poisoning, MITM attacks, or dependency poisoning, leading to remote code execution. The issue arises from the direct execution of the JAR file via subprocess with unvalidated classpath input, allowing malicious classes to execute when loaded by the JVM.

Affected products and versions

Product Affected versions Fixed in
nltk/nltk Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of nltk/nltk

The 12 CVEs of nltk/nltk →
CVE-2026-12372 A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch 3.7 Low CVE-2026-12261 A vulnerability in `nltk.downloader` in nltk/nltk… 5.3 Medium CVE-2026-12259 In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes… 5.3 Medium CVE-2026-12252 In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger,… 7.8 High
Track this CVE