{"data":{"id":"548b7bc4-bb8c-4898-9c31-342136294a65","title":"CVE-2026-0848: NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the…","summary":"NLTK versions <=3.9.2 are affected by CVE-2026-0848, an improper input validation flaw in the StanfordSegmenter module. The module loads external Java .jar files without verification or sandboxing, and the JAR is executed via subprocess with unvalidated classpath input. An attacker who supplies or replaces the JAR can run arbitrary Java bytecode at import time, reachable through model poisoning, MITM attacks, or dependency poisoning.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-0848","publishedAt":"2026-03-05T21:16:14.263Z","cveId":"CVE-2026-0848","cweIds":["CWE-20"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain","model_poisoning"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["NLTK"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"NLTK arbitrary code execution through StanfordSegmenter JAR loading","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00841,"epssCheckedAt":"2026-11-05T00:11:44.607Z","kevDateAdded":null,"advisoryAliases":["GHSA-v2w2-xcg6-53wj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T18:11:04.303Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[]}}