CVE-2026-126300 | NLTK up to 3.10.3 TreebankWordTokenizer TreebankWordTokenizer.span_tokenize special elements in template engine

A vulnerability categorized as problematic has been discovered in NLTK up to 3.10.3. Impacted is the function TreebankWordTokenizer.span_tokenize of the component TreebankWordTokenizer. Executing a manipulation can lead to improper neutralization of special elements used in a template engine.

This vulnerability appears as CVE-2026-126300. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More