CVE-2026-126302
LOW
NVD
CVSS Score
3.3
Severity
LOW
Published
Nov 13, 2026
Vendor
unknown
Description
NLTK from 3.9.4 before 3.10.4 contains a symlink following vulnerability in nltk.sem.chat80.sql_query() that bypasses the pathsec data-root sandbox containment check. Attackers who can write into a trusted NLTK data root can plant a symbolic link to read SQLite databases outside the sandbox.