CVE-2026-12372 | NLTK up to 3.9.4 nltk.pathsec.validate_network_url server-side request forgery

A vulnerability was found in NLTK up to 3.9.4. It has been classified as problematic. Affected is the function nltk.pathsec.validate_network_url. The manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-12372. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More