CVE-2025-14009 | nltk nltk/downloader.py _unzip_iter code injection

19:22 - 18 Feb 2026

A vulnerability described as critical has been identified in nltk. This impacts the function _unzip_iter of the file nltk/downloader.py. Such manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2025-14009. The attack can be launched remotely. No exploit exists.