The WekaClassifier component in NLTK improperly handles caller-controlled model file paths by passing them directly to the weka Java VM without validating them against NLTK's path security enforcement. This allows an attacker to specify arbitrary file paths for model saving and loading, enabling arbitrary file writes and reads outside the intended data root directories. This vulnerability bypasses the pathsec containment measures introduced in a prior advisory (CVE-2026-81726) and affects NLTK versions prior to 3.10.4.