CVE-2026-126295 | NLTK up to 3.10.3 BllipParser from_unified_model_dir parser_model/reranker_features/reranker_weights path traversal

November 13, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in NLTK up to 3.10.3. Affected by this issue is the function from_unified_model_dir of the component BllipParser. The manipulation of the argument parser_model/reranker_features/reranker_weights leads to path traversal.

This vulnerability is referenced as CVE-2026-126295. The attack can only be performed from a local environment. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More