Threats tagged 'brew-acronym-cve-2026-81727'

NLTK's downloader component has a filesystem containment bypass vulnerability where it follows pre-existing hardlinks during package extraction, allowing overwriting of files outside the intended install root. While symlink escapes are blocked, hardlinks inside the install tree are treated as normal files, enabling an attacker with write access to the downloader root on the same filesystem to overwrite arbitrary files. This issue affects versions 3.9.4 and 3.10.0-rc2 and is fixed in version 3.10.3.