GHSA-9r6g-266r-89x4
NLTK Stanford wrapper classes execute untrusted JAR files without verification
At a glance
- Published
- Updated
- CVE
- CVE-2026-12252
- Aliases
- PYSEC-2026-2085
- CVSS_V3
- CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulnerable to untrusted JAR code execution. These classes accept user-controllable JAR paths and execute them via the `java()` function, which invokes `subprocess.Popen()` without integrity verification. This vulnerability is identical to CVE-2026-0848, which was fixed for StanfordSegmenter by adding SHA256 verification. However, the fix was not applied to these additional classes, leaving them susceptible to arbitrary code execution when loading untrusted JAR files.
Affected packages
| Package | Versions |
|---|---|
| PyPI · nltk | introduced 0, fixed 3.9.4 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-12252 ADVISORY
- https://github.com/nltk/nltk/pull/3743 WEB
- https://github.com/nltk/nltk/commit/006f4b83d430147b067b81e2cddd226d6fa405c8 WEB
- https://github.com/nltk/nltk/commit/24777f0cb8c33ed2839d16e0f8169a3c312a6806 WEB
- https://github.com/nltk/nltk PACKAGE
- https://github.com/nltk/nltk/releases/tag/v3.10.3 WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2026-2085.yaml WEB
- https://huntr.com/bounties/f5c93982-0cc9-4e2e-bb85-1b6ab29a2efb WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |