diff --git a/.changeset/bump-nltk-3-10-4.md b/.changeset/bump-nltk-3-10-4.md
new file mode 100644
index 00000000..c5c94ce5
--- /dev/null
+++ b/.changeset/bump-nltk-3-10-4.md
@@ -0,0 +1,5 @@
+---
+'@e2b/code-interpreter-template': patch
+---
+
+Bump `nltk` to 3.10.4 (GHSA-8mgp-746c-j5xp). NLTK now confines resource reads/writes to `nltk.data.path`, loads pickled models through a restricted unpickler and skips world-writable data directories (e.g. under `/tmp`); the default `~/nltk_data` is unaffected.
diff --git a/template/requirements.txt b/template/requirements.txt
index be756af2..c2e18c48 100644
--- a/template/requirements.txt
+++ b/template/requirements.txt
@@ -19,7 +19,7 @@ gensim==4.4.0
 imageio==2.37.3
 joblib==1.5.3
 librosa==0.11.0
-nltk==3.10.3
+nltk==3.10.4
 numpy==2.3.5
 numba==0.66.0
 opencv-python==4.11.0.86