{"id":"CVE-2026-92610","aliases":[],"cve":{"records":[{"id":"CVE-2026-92610","source":"eclipse","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-16T14:04:38.097Z","published":"2026-11-03T08:42:54.156Z","modified":"2026-11-06T18:44:07.455Z"}],"publishers":[{"name":"eclipse","role":"CNA","organizationId":"e51fbebd-6053-4e49-959f-1b94eeb69a2c","modified":"2026-11-03T08:42:54.156Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-06T18:44:07.455Z"}],"references":[{"url":"https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/969","tags":[],"source":"eclipse"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/309","tags":[],"source":"eclipse"}],"weaknesses":[{"id":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory","source":"eclipse"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-06T18:43:44.199269Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"total"}]}]},"title":"Improper limitation of paths in py-aspect-model-loader","titleSource":"eclipse","descriptionSource":"eclipse","description":"In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references by extracting the third and fourth colon-separated components of any urn:samm:… namespace declared in a parsed Turtle file to build a directory to scan. A model file containing @prefix x: <urn:samm:../../../foo:bar#> or @prefix x: <urn:samm:/abs/path:bar#> causes the loader to glob and parse *.ttl files from arbitrary directories outside the intended models root, merging their contents into the returned graph.","score":9.8,"severity":"critical","published":"2026-11-03T08:42:54.156Z","modified":"2026-11-06T18:44:07.455Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Eclipse Foundation","name":"Eclipse Semantic Modeling Framework (ESMF)","platforms":[],"versions":[{"version":"2.1.2","status":"affected","lessThanOrEqual":"2.2.1","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"eclipse","url":"https://www.cve.org/CVERecord?id=CVE-2026-92610"}],"remediation":[],"references":["https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/969","https://gitlab.eclipse.org/security/cve-assignment/-/work_items/309"],"sources":[{"name":"CVE","id":"CVE-2026-92610","modified":"2026-11-06T18:44:07.455Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-92610"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8}],"sourceAffected":[],"observedAt":"2026-11-06T19:34:14.872Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T01:10:30.655Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-11-03T08:55:33.358Z","attemptedAt":"2026-11-03T08:55:33.358Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-03T08:55:32.531Z","attemptedAt":"2026-11-03T08:55:32.531Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-03T08:55:32.362Z","attemptedAt":"2026-11-03T08:55:32.362Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-03T08:55:33.282Z","attemptedAt":"2026-11-03T08:55:33.282Z"}],"evidence":[],"aiSummary":{"text":"The Eclipse Semantic Modeling Framework (ESMF) py-aspect-model-loader, versions 2.1.2 to 2.2.1, has an improper limitation of paths, allowing access to arbitrary directories. An attacker with crafted model files can cause the loader to parse files outside the intended models root. This may merge unintended contents into the returned graph.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-03T09:51:10.690Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-92610"}]}}