Path Traversal Vulnerability in Khronos NNEF-Tools Software
CVE-2026-110657

4.8MEDIUM

Key Information:

Vendor: Khronos Group
Status: Nnef; Nnef-tools
Vendor: CVE Published:; 14 October 2026

🔔 Create Khronos Group Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-110657?

Khronos NNEF-Tools, including versions up to 1.0.10 and nnef-tools up to 1.0.11, are susceptible to a path traversal vulnerability. This issue arises when an attacker provides crafted variable labels, allowing the execution of '../' sequences or absolute paths within a graph.nnef file. By exploiting this vulnerability, malicious users can create or overwrite '.dat' files outside the designated model directory during operations such as converting, saving, or generating weights. This can lead to unauthorized file modifications and potential data breaches.

Affected Version(s)

nnef 0 <= 1.0.10

nnef-tools 0 <= 1.0.11

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-110657 - Proof of Concept