Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-59974— Stanza: Zip Slip Path Traversal in Model/Resource Extraction

Quick assessment

Affected
stanfordnlp stanza
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Stanza 是斯坦福大学开发的 NLP Python 库，支持多种人类语言的词法分析、句子分割、命名实体识别（NER）和句法分析。在 1.14.0 版本之前， 中的 函数在下载模型和资源包时，直接将下载的压缩包传递给 ，且未对压缩包内文件路径进行校验。该存在漏洞的解压路径可通过 和 触发。若攻击者构造包含父目录穿越条目（如 ）的恶意压缩包，则解压过程可能会将文件写入预期模型目录之外，从而覆盖 Stanza 进程具有写权限的文件，并可能通过修改 shell 配置文件、SSH 授权数据、Python 包或可执行脚本来

CVSS 7.8 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-59974

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Stanza: Zip Slip Path Traversal in Model/Resource Extraction
Source: CVE Program / CVE List V5
Vulnerability Description
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating member paths, and the vulnerable extraction path is reachable through stanza.download and stanza.install_corenlp. A malicious archive containing parent-directory traversal entries can write outside the intended model directory, allowing files writable by the Stanza process to be overwritten and potentially enabling code execution through modified shell configuration, SSH authorization data, Python packages, or executable scripts. This issue is fixed in version 1.14.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
stanfordnlp stanza < 1.14.0 -

II. Public POCs for CVE-2026-59974

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-59974

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-59974 (1)

Other References for CVE-2026-59974 (2)

IV. Related Vulnerabilities

Same product: stanza
Same vendor: stanfordnlp
Same weakness: CWE-22

V. Comments for CVE-2026-59974

No comments yet

Leave a comment