THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-6ww7-3frv-cqxh (high) — NLTK: pathsec SSRF protection can be bypassed when a proxy is configured

[GHSA] GHSA-6ww7-3frv-cqxh (high) — NLTK: pathsec SSRF protection can be bypassed when a proxy is configured

medgithub_advisoriesPublished 2026-09-08

GHSA-6ww7-3frv-cqxh Severity: high CVE: CVE-2026-78682

NLTK: pathsec SSRF protection can be bypassed when a proxy is configured

### Summary

Current NLTK source reopens SSRF in proxied environments. `pathsec.urlopen()` validates the requested hostname locally, but once proxy inheritance is enabled the real fetch is performed by the proxy rather than by the validated direct-connect socket path.

Indicators of compromise

CVE-2026-78682cve
CVE-2026-54296cve

Original source: https://github.com/advisories/GHSA-6ww7-3frv-cqxh