What’s Vulnerable › Vulnerabilities

CVE-2026-110657: Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable Label

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-14 · updated 2026-10-16
• Weakness: CWE-22

Description

Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. Attackers can supply a graph.nnef with '../' sequences or absolute paths in labels to create or overwrite '.dat' files when users convert, save, or generate weights.

Affected products

• Khronos Group nnef: through 1.0.10
• Khronos Group nnef-tools: through 1.0.11

References

• https://github.com/KhronosGroup/NNEF-Tools
• https://github.com/KhronosGroup/NNEF-Tools/blob/0bb9c04fcf69c19e0aefa1ba9bf65f05478c8f81/nnef-pyproject/nnef/__init__.py#L87
• https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SJiYagajfe
• https://www.vulncheck.com/advisories/khronos-nnef-tools-nnef-through-1.0.10-and-nnef-tools-through-1.0.11-path-traversal-via-variable-label
• https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SJiYagajfe

Get alerted when CVE-2026-110657 or the next vulnerability affects your stack