CVE-2026-126296 | NLTK up to 3.10.3 Maxent Parameter save_maxent_params/load_maxent_params tab_dir path traversal

SecurityVulns
Yanac

A vulnerability labeled as critical has been found in NLTK up to 3.10.3. This issue affects the function save_maxent_params/load_maxent_params of the component Maxent Parameter Handler. Executing a manipulation of the argument tab_dir can lead to path traversal.

This vulnerability is handled as CVE-2026-126296. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More