NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned index state. Attackers can exploit frame_by_name, doc, lu, and header methods with crafted parameters to read arbitrary XML files accessible to the application.

A flaw was found in NLTK. This path traversal vulnerability, located in the FramenetCorpusReader and NKJPCorpusReader components, allows an attacker to read arbitrary XML files accessible to the application. This can be achieved by supplying unsafe selectors or poisoned index state, exploiting methods such as `frame_by_name`, `doc`, `lu`, and `header` with specially crafted parameters. The primary consequence is information disclosure.

This path traversal flaw in NLTK's FramenetCorpusReader and NKJPCorpusReader can lead to information disclosure by allowing an attacker to read arbitrary XML files outside the intended corpus root. Successful exploitation requires an application to process specially crafted input through the vulnerable NLTK components. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Exploit Intelligence Not affected exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 Lightspeed Core Not affected lightspeed-core/lightspeed-stack-rhel9 Lightspeed Core Not affected lightspeed-core/rag-tool-cpu-rhel9 Lightspeed Core Not affected lightspeed-core/rag-tool-cuda-12.9-rhel9 OpenShift Lightspeed Not affected openshift-lightspeed/lightspeed-ocp-rag-rhel9 OpenShift Lightspeed Not affected openshift-lightspeed/lightspeed-service-api-rhel9 OpenShift Lightspeed Not affected openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 Red Hat Ansible Automation Platform 2 Not affected ansible-automation-platform-25/lightspeed-chatbot-rhel8 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-llama-stack-core-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-ogx-core-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-ta-lmes-job-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-trustyai-nemo-guardrails-server-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-62385 https://nvd.nist.gov/vuln/detail/CVE-2026-62385 https://github.com/nltk/nltk/security/advisories/GHSA-568f-pv23-39p4 https://www.vulncheck.com/advisories/nltk-path-traversal-via-framenet-and-nkjp-readers