CVE-2026-110657Published
Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable Label
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110657 · Microsoft / collected KEV context
cve-program · CVE-2026-110657
- https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SJiYagajfe
- https://github.com/KhronosGroup/NNEF-Tools/blob/0bb9c04fcf69c19e0aefa1ba9bf65f05478c8f81/nnef-pyproject/nnef/__init__.py#L87
- https://github.com/KhronosGroup/NNEF-Tools
- https://www.vulncheck.com/advisories/khronos-nnef-tools-nnef-through-1.0.10-and-nnef-tools-through-1.0.11-path-traversal-via-variable-label
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.