A AegiFlow
HIGHCVSS 8.3

GHSA-hqj7-phwp-c3fp

Duplicate Advisory: Model-artifact APIs bypass pathsec and touch files outside allowed roots

Published
2026-08-27
Modified
2026-09-02
Sources
github-advisory

Summary

## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8mgp-746c-j5xp. This link is maintained to preserve external references. ## Original Description NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagger, and maxent parameter APIs when pathsec is enabled.

Affected packages

EcosystemPackageAffected versionsFixed versions
PyPInltk

Remediation: No patched version is listed by GitHub.

References

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.