CVE-2026-0847 is a path traversal vulnerability (CWE-22) affecting NLTK versions <=3.9.2. Multiple CorpusReader classes including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader fail to properly sanitize or validate file paths, enabling attackers to traverse directories and read arbitrary files on the server. This vulnerability allows unauthorized access to sensitive files and may escalate to remote code execution when chained with other vulnerabilities. The CVSS 3.0 score is 8.6 (High), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact with limited integrity and availability impact. Red Hat has published advisories referencing this CVE but no explicit patch or fix details are provided in the input data.

Successful exploitation allows an attacker to read arbitrary files on the affected system, potentially exposing sensitive information such as system files, SSH private keys, and API tokens. This unauthorized access can compromise confidentiality and may facilitate further attacks, including remote code execution if combined with other vulnerabilities. The vulnerability poses a high risk in environments processing user-controlled file inputs.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Red Hat has published advisories referencing CVE-2026-0847 but no explicit patch or fix details are provided in the available data. Users should monitor the vendor advisories for updates and apply any official fixes once available. Until a patch is applied, avoid processing untrusted file paths with the affected CorpusReader classes or implement strict input validation and sanitization to mitigate path traversal risks.