{"id":"ghsa-ghsa-j456-xh4h-cpf2","seq":1708816,"kind":"advisory","title":"NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment","url":"https://github.com/advisories/GHSA-j456-xh4h-cpf2","permalink":"https://vulnpulse.app/items/ghsa-ghsa-j456-xh4h-cpf2","summary":"影響: pip:nltk <= 3.10.3 → 3.10.4\nWekaClassifier in NLTK passes a caller-controlled model file path to the weka Java VM without any nltk.pathsec validation. WekaClassifier.train puts the caller's model_filename verbatim into the weka argv [\"-d\", model_filename, ...] (weka writes the trained model there), and WekaClassifier._classify_many puts self._model into [\"-l\", self._model, ...] (weka reads it). Under nltk.pathsec.ENFORCE=True (the default on current HEAD), NLTK's stated invariant — established by advisory CVE-2026-81726 /…","severity":"high","techs":["python"],"cves":[],"tags":["GHSA-j456-xh4h-cpf2","nltk"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T14:50:30.000Z","fetched_at":"2026-10-27T21:03:52.214Z"}