CVE-2026-110657: Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable Label
Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. Attackers can supply a graph.nnef with '../' sequences or absolute paths in labels to create or overwrite '.dat' files when users convert, save, or generate weights.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue in practice?
Users who process attacker-supplied NNEF models are exposed when they convert a model, save it, or generate its weights. Exploitation requires a crafted graph.nnef file and user interaction with one of those operations.
What can a successful exploit modify?
A crafted variable label containing ../ sequences or an absolute path can cause .dat files to be created or overwritten outside the intended model directory. The provided information does not indicate impact beyond those .dat file write operations.