ChatterBot versions before 1.2.14 contain a TOCTOU race condition in the UbuntuCorpusTrainer.extract() function. The function uses a predictable directory path (~/ubuntu_data/ubuntu_dialogs) and performs a check-then-create operation before extracting a tar archive to that path. Because the path is predictable and the check-then-create is not atomic, a local attacker can pre-plant a symbolic link at that location. When the tar archive is extracted, files are written through the symlink to an arbitrary directory controlled by the attacker. This can lead to unauthorized file writes. The vulnerability is addressed in ChatterBot version 1.2.14.

A local attacker with the ability to create a symlink at the predictable extraction path can cause arbitrary files to be written to locations of their choosing on the filesystem. This can lead to unauthorized file modification or overwriting, potentially impacting confidentiality. The CVSS score is 5.5 (medium severity), reflecting local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

Upgrade ChatterBot to version 1.2.14 or later, where this TOCTOU race condition vulnerability is fixed. There is no official patch or temporary fix other than upgrading. Until upgraded, avoid running the vulnerable extract function in environments where local attackers can create symlinks at the predictable extraction path.