CVE-2026-12261 | nltk up to 3.9.4 Downloader nltk.downloader code injection

August 7, 2026 Yanac

A vulnerability labeled as critical has been found in nltk up to 3.9.4. The affected element is the function nltk.downloader of the component Downloader. Such manipulation leads to code injection.

This vulnerability is uniquely identified as CVE-2026-12261. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More