CVE-2026-110657 Khronos Group CVE debrief

Who should care

Defenders responsible for nnef and nnef-tools installations, especially in environments where model conversion, saving, or weight generation occurs, should assess exposure and prioritize verification and patching.

Why it matters

Defenders should care about CVE-2026-110657 because it allows attackers to write files outside the model directory via crafted variable labels in Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11. This vulnerability can lead to potential unauthorized file creation or overwrite, possible data integrity issues, and requires verification of affected versions and patching. The impact is medium severity with a CVSS score of 4.8.

• Potential unauthorized file creation or overwrite
• Possible data integrity issues
• Need for verification of affected versions and patching
• Potential for malicious model files to be used for exploitation

Technical summary

The Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. Attackers can supply a graph.nnef with '../' sequences or absolute paths in labels to create or overwrite '.dat' files when users convert, save, or generate weights. The vulnerability can lead to potential unauthorized file creation or overwrite, possible data integrity issues, and requires verification of affected versions and patching. Defenders should prioritize verifying and patching affected nnef and nnef-tools installations, especially in environments where model conversion, saving, or weight generation

Defensive priority

Defenders should prioritize verifying and patching affected nnef and nnef-tools installations, especially in environments where model conversion, saving, or weight generation occurs.

Recommended defensive actions

• Verify and patch affected nnef and nnef-tools installations
• Restrict input to valid variable labels
• Monitor for suspicious model conversion, saving, or weight generation activity
• Implement additional access controls and file system restrictions
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Evidence notes

The CVE record and source item provide details on the path traversal vulnerability in Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11. The vulnerability allows attackers to write files outside the model directory via crafted variable labels.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.