Fluid Attacks Database

Description

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validation guard and are resolved to files outside the intended corpus root when accessed via frame_by_name(), _lu_file(), or doc() methods.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 13	nltk	=3.10.0-1 \|\| =3.10.1-1 \|\| =3.10.3-1 \|\| =3.9.1-2 \|\| =3.9.2-1 \|\| =3.9.3-1	-
debian 11	nltk	=3.10.0-1 \|\| =3.10.1-1 \|\| =3.10.3-1 \|\| =3.5-1 \|\| =3.6.5-1 \|\| =3.6.7-1 \|\| =3.7-1 \|\| =3.8-1 \|\| =3.8.1-1 \|\| =3.9.1-1 \|\| =3.9.1-2 \|\| =3.9.2-1 \|\| =3.9.3-1	-
debian 12	nltk	=3.10.0-1 \|\| =3.10.1-1 \|\| =3.10.3-1 \|\| =3.8-1 \|\| =3.8.1-1 \|\| =3.9.1-1 \|\| =3.9.1-2 \|\| =3.9.2-1 \|\| =3.9.3-1	-
debian 14	nltk	=3.10.0-1 \|\| =3.10.1-1 \|\| =3.9.1-2 \|\| =3.9.2-1 \|\| =3.9.3-1 \|\| >=0 <3.10.3-1	3.10.3-1

Aliases

1. CVE-2026-623842. NVD-2026-623843. OSV-DEBIAN-2026-623844. OSV-2026-623845. SECURITY-TRACKER-CVE-2026-62384

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.