Threats tagged 'brew-acronym-cve-2026-65915'

A logic bug in the NLTK library's FileSystemPathPointer.open() method disables a sandbox check intended to restrict file access. This flaw allows arbitrary file reads via file:// URLs passed to nltk.data.load(), enabling access to any file readable by the process user. The issue arises because a path normalization check always evaluates to false, making the protective condition dead code. This vulnerability affects applications that allow user input to influence the path passed to NLTK's data loading functions, such as web APIs or multi-tenant environments.