NLTK contains a file sandbox bypass vulnerability in several model-artifact APIs that handle model paths insecurely. These APIs use raw file operations on caller-controlled paths, allowing reading and writing files outside the intended sandbox even when path security enforcement is enabled. This affects published version 3.9.4 and the current release candidate 3.10.0-rc2. A fix is available in version 2.0.0_6.