Threats tagged 'brew-acronym-cve-2026-63312'

NLTK's StreamBackedCorpusView bypasses the pathsec.ENFORCE sandboxing mechanism, allowing arbitrary local file reads. Although setting nltk.pathsec.ENFORCE = True is intended to restrict file access to approved directories, StreamBackedCorpusView opens files directly using builtins.open(), ignoring pathsec validation. This flaw enables attackers who control the fileid argument to read any local file, including sensitive system and application files. The issue affects StreamBackedCorpusView, XMLCorpusView, and any corpus reader subclass passing raw string fileids. A fix is available in version 2.0.0_4 that replaces direct file operations with pathsec-validated calls.