Advisoriesby IbisNLTKGHSA-cgvx-9447-vcch
ntlk unsafe deserialization vulnerability
Fix: upgrade to 3.9 or later
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| nltk PyPI | < 3.9 | 3.9 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-300, CWE-502
- Also known as
- CVE-2024-39705, PYSEC-2024-167
- nvd.nist.gov/vuln/detail/CVE-2024-39705
- github.com/nltk/nltk/issues/2522
- github.com/nltk/nltk/issues/3266
- github.com/nltk/nltk/commit/441aecb7d33014bd08672232c6c8bb69c2ceaba2
- github.com/nltk/nltk
- github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2024-167.yaml
- www.vicarius.io/vsociety/posts/rce-in-python-nltk-cve-2024-39705-39706
More NLTK advisories
All NLTK
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltkCVE-2026-33230fixed in 3.9.4Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoSCVE-2026-66393fixed in 3.9.4NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()CVE-2026-0846fixed in 3.9.3NLTK: code executionCVE-2026-0848fixed in 3.9.3NLTK has a Path Traversal issueCVE-2026-0847fixed in 3.9.3NLTK has a Zip Slip VulnerabilityCVE-2025-14009fixed in 3.9.3