Vulnerability Description
NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView._read_xml_fragment() that rescans accumulated XML fragments on every 1 KiB block read. Attackers can provide malformed XML corpus files to cause severe CPU consumption and denial of service through affected readers like BNCCorpusReader.
CVSS Score
LOW
Related Weaknesses (CWE)
References
- https://github.com/nltk/nltk/security/advisories/GHSA-vp2x-qp44-57v7
- https://www.vulncheck.com/advisories/nltk-before-3.10.3-quadratic-cpu-exhaustion
- https://github.com/nltk/nltk/security/advisories/GHSA-vp2x-qp44-57v7
FAQ
What is CVE-2026-81723?
CVE-2026-81723 is a vulnerability with a CVSS score of 3.7 (LOW). NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView._read_xml_fragment() that rescans accumulated XML fragments on every 1 KiB block read. Attackers can provi...
How severe is CVE-2026-81723?
CVE-2026-81723 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-81723?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.