CVE-2026-58198

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-58198", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-29T17:09:25.872Z", "datePublished": "2026-07-09T18:32:16.074Z", "dateUpdated": "2026-07-09T19:12:29.625Z"}, "containers": {"cna": {"title": "ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer", "problemTypes": [{"descriptions": [{"cweId": "CWE-367", "lang": "en", "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-59", "lang": "en", "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v"}, {"name": "https://github.com/gunthercox/ChatterBot/pull/2445", "tags": ["x_refsource_MISC"], "url": "https://github.com/gunthercox/ChatterBot/pull/2445"}, {"name": "https://github.com/gunthercox/ChatterBot/commit/82817b5c28bfd43e682b991bcc76e6f780726dbf", "tags": ["x_refsource_MISC"], "url": "https://github.com/gunthercox/ChatterBot/commit/82817b5c28bfd43e682b991bcc76e6f780726dbf"}, {"name": "https://github.com/gunthercox/ChatterBot/releases/tag/1.2.14", "tags": ["x_refsource_MISC"], "url": "https://github.com/gunthercox/ChatterBot/releases/tag/1.2.14"}], "affected": [{"vendor": "gunthercox", "product": "ChatterBot", "versions": [{"version": "< 1.2.14", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-09T18:32:16.074Z"}, "descriptions": [{"lang": "en", "value": "ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2.14, UbuntuCorpusTrainer.extract() uses a predictable home-rooted output directory (~/ubuntu_data/ubuntu_dialogs) with a check-then-create pattern followed by tar.extractall(path=self.data_path), allowing a local attacker who pre-plants a symlink at the predictable path to cause archive contents to be written through the symlink to an attacker-chosen directory. This issue is fixed in version 1.2.14."}], "source": {"advisory": "GHSA-wvrh-2f4m-924v", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-09T19:12:08.575193Z", "id": "CVE-2026-58198", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-09T19:12:29.625Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-58198", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-09T19:12:08.575193Z"}}}], "references": [{"url": "https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-09T19:12:25.892Z"}}], "cna": {"title": "ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer", "source": {"advisory": "GHSA-wvrh-2f4m-924v", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "gunthercox", "product": "ChatterBot", "versions": [{"status": "affected", "version": "< 1.2.14"}]}], "references": [{"url": "https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v", "name": "https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/gunthercox/ChatterBot/pull/2445", "name": "https://github.com/gunthercox/ChatterBot/pull/2445", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/gunthercox/ChatterBot/commit/82817b5c28bfd43e682b991bcc76e6f780726dbf", "name": "https://github.com/gunthercox/ChatterBot/commit/82817b5c28bfd43e682b991bcc76e6f780726dbf", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/gunthercox/ChatterBot/releases/tag/1.2.14", "name": "https://github.com/gunthercox/ChatterBot/releases/tag/1.2.14", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2.14, UbuntuCorpusTrainer.extract() uses a predictable home-rooted output directory (~/ubuntu_data/ubuntu_dialogs) with a check-then-create pattern followed by tar.extractall(path=self.data_path), allowing a local attacker who pre-plants a symlink at the predictable path to cause archive contents to be written through the symlink to an attacker-chosen directory. This issue is fixed in version 1.2.14."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-367", "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-59", "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-09T18:32:16.074Z"}}}, "cveMetadata": {"cveId": "CVE-2026-58198", "state": "PUBLISHED", "dateUpdated": "2026-07-09T19:12:29.625Z", "dateReserved": "2026-06-29T17:09:25.872Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-09T18:32:16.074Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "ChatterBot", "vendor": "gunthercox", "versions": [{"status": "affected", "version": "< 1.2.14"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2.14, UbuntuCorpusTrainer.extract() uses a predictable home-rooted output directory (~/ubuntu_data/ubuntu_dialogs) with a check-then-create pattern followed by tar.extractall(path=self.data_path), allowing a local attacker who pre-plants a symlink at the predictable path to cause archive contents to be written through the symlink to an attacker-chosen directory. This issue is fixed in version 1.2.14."}, {"lang": "es", "value": "ChatterBot es un motor de di\u00e1logo conversacional de aprendizaje autom\u00e1tico para crear chatbots. Antes de la versi\u00f3n 1.2.14, UbuntuCorpusTrainer.extract() utiliza un directorio de salida predecible con ra\u00edz en el directorio de inicio (~/ubuntu_data/ubuntu_dialogs) con un patr\u00f3n de verificar y luego crear, seguido de tar.extractall(path=self.data_path), lo que permite a un atacante local que pre-planta un enlace simb\u00f3lico en la ruta predecible hacer que el contenido del archivo se escriba a trav\u00e9s del enlace simb\u00f3lico a un directorio elegido por el atacante. Este problema se solucion\u00f3 en la versi\u00f3n 1.2.14."}], "id": "CVE-2026-58198", "lastModified": "2026-10-25T17:10:00.197", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-58198", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-09T19:12:08.575193Z", "version": "2.0.3"}}]}, "published": "2026-07-09T19:17:06.933", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/gunthercox/ChatterBot/commit/82817b5c28bfd43e682b991bcc76e6f780726dbf"}, {"source": "security-advisories@github.com", "url": "https://github.com/gunthercox/ChatterBot/pull/2445"}, {"source": "security-advisories@github.com", "url": "https://github.com/gunthercox/ChatterBot/releases/tag/1.2.14"}, {"source": "security-advisories@github.com", "url": "https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-59"}, {"lang": "en", "value": "CWE-367"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.2.14)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "ChatterBot", "source": "cna", "vendor": "gunthercox"}, "product": "chatterbot", "vendor": "gunthercox"}], "created": "2026-07-09T19:30:17.377657+00:00", "updated": "2026-08-01T14:15:03.800010+00:00", "vendors": ["gunthercox", "gunthercox$PRODUCT$chatterbot"]}