The vulnerability CVE-2026-0846 in nltk version 3.9.2 arises from the filestring() function in the nltk.util module not sanitizing user-supplied file paths. This allows attackers to specify absolute or directory traversal paths, leading to arbitrary file read access. The CVSS 3.0 score is 8.6, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability. The vulnerability is documented by Red Hat advisories, but no explicit patch or fix version is stated in the provided data.

Successful exploitation allows an attacker to read arbitrary files on the system where nltk 3.9.2 is used, potentially exposing sensitive information. The vulnerability affects confidentiality (high impact), integrity (low impact), and availability (low impact). It can be exploited remotely if the vulnerable function is exposed via web APIs or other interfaces accepting user input.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The Red Hat advisories linked do not explicitly mention a fixed version or patch for nltk 3.9.2. Until an official fix is available, avoid exposing the filestring() function to untrusted input or implement input validation and sanitization to prevent absolute path or directory traversal inputs.