CVE-2026-92610
In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves…
- Risk score
- 65/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 3 Nov 2026
Open in the live forecast Today's forecast
What to know
- What it is
- The esmf-sdk-py-aspect-model-loader is vulnerable to a directory traversal attack due to incorrect handling of cross-file model references. An attacker could exploit this vulnerability to access and merge arbitrary files from outside the intended models root.
- Affected
- {'products': [], 'packages': ['esmf-sdk-py-aspect-model-loader'], 'versions': ['2.1.2', '2.2.1']}
- Fix
- Check the linked advisory for a fix, as none is specified in the record.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references by extracting the third and fourth colon-separated components of any urn:samm:… namespace declared in a parsed Turtle file to build a directory to scan. A model file containing @prefix x: <urn:samm:../../../foo:bar#> or @prefix x: <urn:samm:/abs/path:bar#> causes the loader to glob and parse *.ttl files from arbitrary directories outside the intended models root, merging their contents into the returned graph.
Last activity 3 Nov 2026. Patch Forecast updates every hour.