Aller au contenu
en Se connecter
8.6 Élevée

CVE-2026-0846 A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file…

Description

A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by providing absolute paths or traversal paths. This vulnerability can be exploited locally or remotely, particularly in scenarios where the function is used in web APIs or other interfaces that accept user-supplied input.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat OpenShift AI 2.25 1775144403 premières → < 1775144403 1775144403
Red Hat OpenShift AI 3.3 1778263054 premières → < 1778263054 1778263054
Lightspeed Core Versions non publiées
OpenShift Lightspeed Versions non publiées
Red Hat Ansible Automation Platform 2 Versions non publiées
Red Hat OpenShift AI (RHOAI) Versions non publiées
nltk/nltk Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat OpenShift AI 2.25

Les 140 CVE de Red Hat OpenShift AI 2.25 →
CVE-2026-86332 A flaw was found in odh-dashboard in Red Hat OpenShift AI 6.5 Moyenne CVE-2026-18620 A flaw was found in Data Science Pipelines 7.1 Élevée CVE-2026-18618 A flaw was found in ml-metadata 7.5 Élevée CVE-2026-18611 A flaw was found in the Data Science Pipelines Operator 7.5 Élevée
Suivre cette CVE