THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-54293 (HIGH 7.5) — NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Prior to 3.10.0-rc1, nltk.data.load() in NLTK is vulnerable to path traversal via URL-encoded path separators and

[NVD] CVE-2026-54293 (HIGH 7.5) — NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Prior to 3.10.0-rc1, nltk.data.load() in NLTK is vulnerable to path traversal via URL-encoded path separators and

lownvdPublished 2026-06-22

CVE-2026-54293 CVSS: 7.5 HIGH Published: 2026-06-22T19:17:20.983

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Prior to 3.10.0-rc1, nltk.data.load() in NLTK is vulnerable to path traversal via URL-encoded path separators and traversal segments when using the nltk: URL scheme. T

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-54293