CVE-2026-62384
NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validation guard and are resolved to files outside the intended corpus root when accessed via frame_by_name(), _lu_file(), or doc() methods.
- Affected products
- Nltk
- Fix
- Available
- CVSS 4.0
- 8.7 HIGH
- CVSS 3.1
- 7.5 HIGH
- EPSS
- 0.5% (40th percentile)
- Weakness
- CWE-22
- NVD status
- Received
- Published
- 2026-08-22
CVE-2026-62384 at NVD
No indexed exploits for CVE-2026-62384 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-62384 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.