CVE-2026-128134 | NLTK up to 3.10.3 DependencyGraph dependencygraph.py nltk.parse.dependencygraph.dot2img path traversal

November 14, 2026 Yanac

A vulnerability was found in NLTK up to 3.10.3. It has been rated as problematic. The impacted element is the function nltk.parse.dependencygraph.dot2img of the file nltk/parse/dependencygraph.py of the component DependencyGraph. Performing a manipulation results in path traversal.

This vulnerability is reported as CVE-2026-128134. The attack requires a local approach. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More