Khronos NNEF-Tools versions up to nnef 1.0.10 and nnef-tools 1.0.11 contain a path traversal flaw that lets an attacker create or overwrite files outside the intended model directory. By embedding '../' sequences or absolute paths in variable labels within a graph.nnef file, a malicious user can cause the conversion, save, or weight generation processes to write arbitrary '.dat' files. This weakness, identified as CWE‑22, can compromise file integrity, allow privilege escalation within the environment where the tool runs, and potentially enable further attacks such as code execution or denial of service.

The affected products are Khronos Group’s NNEF and NNEF‑Tools. Versions nnef 1.0.10 and nnef-tools 1.0.11 are vulnerable. Any deployment that uses these specific releases without patching is at risk.

The CVSS score of 4.8 indicates a moderate severity. The EPSS score of 0.00244 (less than 1 %) shows a very low probability of exploitation in the wild, and the vulnerability is not listed in CISA’s KEV catalog. Attackers can exploit the weakness by supplying a malicious graph.nnef file when performing conversion or weight generation, which is a local code execution vector dependent on the user executing the tool.