Threats tagged 'brew-acronym-cve-2026-79674'

NLTK versions prior to 2.0.0_5 contain a sandbox bypass vulnerability in the corpus reader constructors. The vulnerability allows corpus readers LinThesaurusCorpusReader and PanLexLiteCorpusReader to perform file and database reads outside the intended sandbox root, bypassing the pathsec sandbox enforcement. This occurs because the CorpusReader.__init__ method converts the root path into a FileSystemPathPointer without sandbox validation, and subsequent file or database access uses builtin open() or sqlite3.connect() directly, circumventing pathsec.open() protections.