CVE-2026-79657
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 1.27%
- 69th pct
- KEV
- No
- Class
- oss containerizable
- CWE-502
Description
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer._execute and numpy.f2py.crackfortran.myeval through pickle REDUCE to execute arbitrary commands during model or tokenizer artifact loading.
Affected packages
| PyPI | nltk | 0 → 3.10.3 |
References
Status: profiled · ingested 2026-08-29T00:00:49.000Z