NLTK versions prior to 3.10.4 contain a file sandbox bypass vulnerability in several model-artifact APIs. These APIs improperly handle caller-controlled model paths by using raw file operations instead of pathsec-aware helpers, allowing reading and writing of files outside the intended sandbox directories. This bypass undermines pathsec enforcement, potentially enabling unauthorized file access or modification. A fix is available in version 3.10.4.