CVE-2026-71513 | NLTK up to 3.10.2 AllowlistUnpickler TransitionParser.parse code injection

August 22, 2026 Yanac

A vulnerability was found in NLTK up to 3.10.2 and classified as critical. Affected by this vulnerability is the function TransitionParser.parse of the component AllowlistUnpickler. Such manipulation leads to code injection.

This vulnerability is listed as CVE-2026-71513. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More