CyberRota Analysis
AI-GeneratedVersions of NLTK prior to 3.10.3 are vulnerable to a critical remote code execution flaw that allows attackers to exploit unsafe pickle loaders, potentially executing arbitrary commands during the loading of model or tokenizer artifacts. This vulnerability arises from the trust placed in entire module namespaces rather than specific safe callables, enabling crafted malicious payloads to invoke dangerous functions. Organizations using NLTK for natural language processing tasks should prioritize updating to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer._execute and numpy.f2py.crackfortran.myeval through pickle REDUCE to execute arbitrary commands during model or tokenizer artifact loading.
Related CVEs
Other vulnerabilities affecting the same vendor(s)