CVE-2025-71408
highPriorität · verfolgen · 0EPSS 0.003 · 18. PerzentilEURUUSEPSS · bewertet 2026-10-28
NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the __main__ block passes command-line arguments directly to eval() as suffixes of BigramAssocMeasures without allowlist validation or sanitization, enabling an attacker to supply a Python expression that escapes the intended attribute lookup and executes arbitrary code including OS commands via the os module.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.9–8.5
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (4)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- GHSA-848c-c2cx-j7qxNLTK vulnerable to Eval Injection via collocations CLI arguments2026-07-25ghsa · osvUS
NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the __main__ block passes command-line arguments directly to eval() as suffixes of BigramAssocMeasures without allowlist validation or sanitization, enabling an attacker to supply a Python expression that escapes the intended attribute lookup and executes arbitrary code including OS commands via the os module.
- PYSEC-2026-36572026-07-24vendor · osvUS
NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the __main__ block passes command-line arguments directly to eval() as suffixes of BigramAssocMeasures without allowlist validation or sanitization, enabling an attacker to supply a Python expression that escapes the intended attribute lookup and executes arbitrary code including OS commands via the os module.
auch bekannt als (7)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (16)
Externe Belege — Patches, Meldungen, Analysen.
- https://aydinnyunus.github.io/2026/06/07/command-injection-nltk-collocations-eval/cnnvd
- https://github.com/nltk/nltk/commit/66f14096d952ec8f04934f515e027534bd4eb0accnnvd
- https://github.com/nltk/nltk/pull/3465cnnvd
- https://github.com/nltk/nltk/releasesPatchcnnvd
- https://github.com/nltk/nltk/releases/tag/3.9.3cnnvd
- https://www.vulncheck.com/advisories/nltk-eval-injection-via-collocations-py-command-line-argumentscnnvd
- https://aydinnyunus.github.io/2026/06/07/command-injection-nltk-collocations-eval/enisa_euvd
- https://github.com/nltk/nltk/commit/66f14096d952ec8f04934f515e027534bd4eb0acenisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan