CyberRota Analysis
AI-GeneratedNLTK versions prior to 3.9.4 are vulnerable to a symlink escape issue in the CorpusReader.open() function, which permits local attackers to read arbitrary files beyond the designated corpus root. This flaw arises from inadequate path validation that fails to consider symlink resolution, allowing exploitation through crafted symlinks. Organizations using affected NLTK versions, particularly those handling sensitive data, should prioritize upgrading to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside the corpus root. The vulnerability exists because path validation is lexical and does not account for symlink resolution, enabling attackers to place symlinks inside the corpus root to access files outside the intended boundary.
Related CVEs
Other vulnerabilities affecting the same vendor(s)