NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagger, and maxent parameter APIs when pathsec is enabled.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec
    enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files
    outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagger, and maxent
    parameter APIs when pathsec is enabled. (CVE-2026-81726)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec     enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files     outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagger, and maxent     parameter APIs when pathsec is enabled. (CVE-2026-81726)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478215	SCA: security update for nltk (GHSA-8mgp-746c-j5xp)	Tenable Cloud Security	SCA Checks	Local	high
478215	SCA: security update for nltk (GHSA-8mgp-746c-j5xp)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
476115	Chainguard: multiple open-webui packages: security update to 0.11.4-r0	Tenable Cloud Security	Chainguard Local Security Checks	Local	high
476115	Chainguard: multiple open-webui packages: security update to 0.11.4-r0	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	high
341153	Linux Distros Unpatched Vulnerability : CVE-2026-81726	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-81726

high

Tenable Plugins

high

high

high

high

high