Nnef Tools
Monthly
Path traversal in the Khronos NNEF Python tooling allows a local, unauthenticated attacker to create or overwrite .dat weight files outside the intended model directory when a victim converts, saves, or generates weights from a crafted graph.nnef. The flaw affects nnef through 1.0.10 and nnef-tools through 1.0.11 and is triggered by '../' sequences or absolute paths embedded in variable labels, an operation the tool performs as part of its normal workflow. Impact is limited to low-severity file integrity loss within paths writable by the user running the tool, and exploitation requires the victim to open an attacker-supplied model; publicly available exploit code exists, but there is no evidence of confirmed active exploitation (the issue is not in CISA KEV).
Path traversal in the Khronos NNEF Python tooling allows a local, unauthenticated attacker to create or overwrite .dat weight files outside the intended model directory when a victim converts, saves, or generates weights from a crafted graph.nnef. The flaw affects nnef through 1.0.10 and nnef-tools through 1.0.11 and is triggered by '../' sequences or absolute paths embedded in variable labels, an operation the tool performs as part of its normal workflow. Impact is limited to low-severity file integrity loss within paths writable by the user running the tool, and exploitation requires the victim to open an attacker-supplied model; publicly available exploit code exists, but there is no evidence of confirmed active exploitation (the issue is not in CISA KEV).