CVE-2026-126302 | NLTK up to 3.10.3 chat80 nltk.sem nltk.sem.chat80.sql_query symlink

November 13, 2026 Yanac

A vulnerability was found in NLTK up to 3.10.3 and classified as problematic. This issue affects the function nltk.sem.chat80.sql_query of the file nltk.sem of the component chat80. Such manipulation leads to symlink following.

This vulnerability is listed as CVE-2026-126302. The attack must be carried out locally. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More