AIKIDO-2026-794740

nltk is vulnerable to Improper Link Resolution Before File Access

Improper Link Resolution Before File Access Pre-CVE Published 2 days ago

Medium Risk

This Affects:

nltk

2.0.1 - 3.10.1

Fixed in 3.10.2

Are you affected? Scan for Free

TL;DR

FramenetCorpusReader and IPIPANCorpusReader open files reached through caller- or corpus-index-supplied names without resolving symbolic links first. A symlink planted inside the corpus directory under a name that contains no path-traversal characters is silently followed, so the reader can open a file located anywhere on the filesystem the process can reach. The fix resolves links before opening corpus files and keeps reads confined to the intended corpus root.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and your application uses NLTK's FrameNet or IPI PAN corpus readers on a corpus directory where an untrusted party can place a symbolic link.