---
id: CVE-2026-62385
title: >-
  NLTK versions before 3.10.0 contain a path traversal vulnerability in
  FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML
  files outside the corpus root by supplying unsafe selectors or poisoned index
  state
summary: >-
  NLTK versions before 3.10.0 contain a path traversal vulnerability in
  FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML
  files outside the corpus root by supplying unsafe selectors or poisoned index
  state. Attac…
severity: medium
cvss: 5.9
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-73
  - CWE-22
  - CWE-706
published: '2026-08-22'
updated: '2026-08-22'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-62385'
references:
  - url: 'https://github.com/nltk/nltk/security/advisories/GHSA-568f-pv23-39p4'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/nltk-path-traversal-via-framenet-and-nkjp-readers
    label: disclosure@vulncheck.com
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-62385'
  - url: 'https://github.com/nltk/nltk/pull/3579'
  - url: 'https://github.com/nltk/nltk/pull/3581'
  - url: >-
      https://github.com/nltk/nltk/commit/7d1389d0789c1eca56bd0ed444089e0a3972e3ed
  - url: >-
      https://github.com/nltk/nltk/commit/bf3bf32786791394a1008258b4917a7f2d4dbcda
  - url: 'https://github.com/nltk/nltk/releases/tag/v3.10.0'
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2026-3728.yaml
  - url: 'https://github.com/advisories/GHSA-568f-pv23-39p4'
  - url: 'https://github.com/nltk/nltk'
tags:
  - nvd
  - ghsa
  - pip
  - osv
ingestedAt: '2026-08-23T04:42:15.201Z'
epss: 0.00367
epssPercentile: 0.30591
aliases:
  - GHSA-568f-pv23-39p4
  - PYSEC-2026-3728
ecosystem: pip
vendor: nltk
product: nltk
affected:
  - nltk <= 3.9.4
patched:
  - nltk 3.10.0
---

## Overview

NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned index state. Attackers can exploit frame_by_name, doc, lu, and header methods with crafted parameters to read arbitrary XML files accessible to the application.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-62385)

Affected packages:

- `nltk <= 3.9.4`

Patched in:

- `nltk 3.10.0`

Source: https://github.com/advisories/GHSA-568f-pv23-39p4