CVE-2026-58198

{
  "id": "CVE-2026-58198",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-09T19:17:06.933",
  "lastModified": "2026-10-25T17:10:00.197",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2.14, UbuntuCorpusTrainer.extract() uses a predictable home-rooted output directory (~/ubuntu_data/ubuntu_dialogs) with a check-then-create pattern followed by tar.extractall(path=self.data_path), allowing a local attacker who pre-plants a symlink at the predictable path to cause archive contents to be written through the symlink to an attacker-chosen directory. This issue is fixed in version 1.2.14."
    },
    {
      "lang": "es",
      "value": "ChatterBot es un motor de diálogo conversacional de aprendizaje automático para crear chatbots. Antes de la versión 1.2.14, UbuntuCorpusTrainer.extract() utiliza un directorio de salida predecible con raíz en el directorio de inicio (~/ubuntu_data/ubuntu_dialogs) con un patrón de verificar y luego crear, seguido de tar.extractall(path=self.data_path), lo que permite a un atacante local que pre-planta un enlace simbólico en la ruta predecible hacer que el contenido del archivo se escriba a través del enlace simbólico a un directorio elegido por el atacante. Este problema se solucionó en la versión 1.2.14."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "gunthercox",
          "product": "ChatterBot",
          "versions": [
            {
              "version": "< 1.2.14",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-09T19:12:08.575193Z",
          "id": "CVE-2026-58198",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-59"
        },
        {
          "lang": "en",
          "value": "CWE-367"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/gunthercox/ChatterBot/commit/82817b5c28bfd43e682b991bcc76e6f780726dbf",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/gunthercox/ChatterBot/pull/2445",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/gunthercox/ChatterBot/releases/tag/1.2.14",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}