CVE-2026-12876 in NLTK

Prediction

by VulDB Data Team • 09/02/2026

A security vulnerability has been detected in NLTK. Impacted is the function RecursiveDescentParser of the file nltk/parse/recursive.py of the component Recursive Parsing. The manipulation of the argument grammar leads to resource consumption. The attack may be initiated remotely.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Moderation: accepted
• Entry: VDB-398184
• CPE: ready
• CWE: CWE-400 (confirmed)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-12876
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-12876
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-12876/