CVE-2026-59974

HIGH 7.8

Stanza: Zip Slip Path Traversal in Model/Resource Extraction

CVSS Score

7.8

EPSS Score

0.0%

EPSS Percentile

0th

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating member paths, and the vulnerable extraction path is reachable through stanza.download and stanza.install_corenlp. A malicious archive containing parent-directory traversal entries can write outside the intended model directory, allowing files writable by the Stanza process to be overwritten and potentially enabling code execution through modified shell configuration, SSH authorization data, Python packages, or executable scripts. This issue is fixed in version 1.14.0.

CWE	CWE-22
Vendor	stanfordnlp
Product	stanza
Published	Sep 16, 2026

Stay Ahead of the Next One

Get instant alerts for stanfordnlp stanza

Be the first to know when new high vulnerabilities affecting stanfordnlp stanza are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

stanfordnlp / stanza

< 1.14.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/stanfordnlp/stanza/security/advisories/GHSA-2fwf-f686-7p34 github.com: https://github.com/stanfordnlp/stanza/commit/a7085e75abdf35f277754dda472bba4e6819bcbb github.com: https://github.com/stanfordnlp/stanza/releases/tag/v1.14.0