CVE-2026-33231
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.
Published Mar 20, 2026 · updated Sep 9, 2026 · nltk nltk
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when it is started in its default mode. A simple request causes the process to terminate immediately via , resulting in a denial of service. Commit bbaae83db86a0f49e00f5b0db44a7254c268de9b patches the issue.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 20, 2026 · NIST NVD
Detected
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when it is started in its default mode. A simple request causes the process to terminate immediately via , resulting in a de
Sep 9, 2026 · NIST NVD
Updated
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when it is started in its default mode. A simple request causes the process to terminate immediately via , resulting in a de
Affected
- cpe nltk/nltkversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-33231
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-33231
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, allows unauthenticated remote shutdown of the local WordNet B
nvd.nist.gov