CVE-2026-110657
Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable Label
CVSS Score
3.3
EPSS Score
0.0%
EPSS Percentile
0th
Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. Attackers can supply a graph.nnef with '../' sequences or absolute paths in labels to create or overwrite '.dat' files when users convert, save, or generate weights.
| CWE | CWE-22 |
| Vendor | khronos group |
| Product | nnef |
| Published | Oct 14, 2026 |
| Last Updated | Oct 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for khronos group nnef
Be the first to know when new low vulnerabilities affecting khronos group nnef are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Affected Versions
Khronos Group / nnef
0 ≤ 1.0.10
Khronos Group / nnef-tools
0 ≤ 1.0.11
References
hackmd.io: https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SJiYagajfe github.com: https://github.com/KhronosGroup/NNEF-Tools/blob/0bb9c04fcf69c19e0aefa1ba9bf65f05478c8f81/nnef-pyproject/nnef/__init__.py#L87 github.com: https://github.com/KhronosGroup/NNEF-Tools vulncheck.com: https://www.vulncheck.com/advisories/khronos-nnef-tools-nnef-through-1.0.10-and-nnef-tools-through-1.0.11-path-traversal-via-variable-label
Credits
hieuPenguinnn