CVE-2026-58198: ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2.14, UbuntuCorpusTrai

ChatterBot versions before 1.2.14 have a vulnerability where the UbuntuCorpusTrainer.extract() function uses a predictable directory path (~/ubuntu_data/ubuntu_dialogs) and a check-then-create pattern, allowing a local attacker (someone with access to the same computer) to plant a symlink (a shortcut pointing to another location) at that path and trick the software into writing files to an attacker-controlled directory instead.