Advisory details:
pypa / nltk/PYSEC-2026-2085
| Advisory ID | pypa/nltk/PYSEC-2026-2085 |
| Aliases |
CVE-2026-12252
GHSA-9r6g-266r-89x4 PYSEC-2026-2085 |
| Summary | In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulnerable to untrusted JAR code execution. These classes accept user-controllable JAR paths and execute them via the `java()` function, which invokes `subprocess.Popen()` without integrity verification. This vulnerability is identical to CVE-2026-0848, which was fixed for StanfordSegmenter by adding SHA256 verification. However, the fix was not applied to these additional classes, leaving them susceptible to arbitrary code execution when loading untrusted JAR files. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 7.0 |
| Risk | 3.5 |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| cvssv3 | 7.8 | https://github.com/pypa/advisory-database/blob/main/vulns/nltk/PYSEC-2026-2085.yaml |
| Reference id | Reference type | URL |
|---|---|---|
| https://huntr.com/bounties/f5c93982-0cc9-4e2e-bb85-1b6ab29a2efb | ||
| GHSA-9r6g-266r-89x4 | https://github.com/advisories/GHSA-9r6g-266r-89x4 |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
There are no SSVC decisions available.