MEDIUM
Khronos Group
CVE published 2026-10-14
CVE-2026-110657
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-14T15:01:23.943Z and has not been modified since then. The Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. This vulnerability can lead to potentia [truncated]