CVE-2026-92610
Received Received - Intake

Aspect Model Loader Directory Traversal in esmf-sdk-py

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: Eclipse Foundation

Description
In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references by extracting the third and fourth colon-separated components of any urn:samm:… namespace declared in a parsed Turtle file to build a directory to scan. A model file containing @prefix x: <urn:samm:../../../foo:bar#> or @prefix x: <urn:samm:/abs/path:bar#> causes the loader to glob and parse *.ttl files from arbitrary directories outside the intended models root, merging their contents into the returned graph.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-92610
EUVD
EUVD-2026-115715

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Eclipse Foundation Eclipse Semantic Modeling Framework (ESMF) 2.1.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-92610 is a path traversal vulnerability in the Eclipse Semantic Modeling Framework's py-aspect-model-loader component (versions 2.1.2 to 2.2.1). The loader improperly handles cross-file model references in Turtle files by extracting components from crafted namespace declarations like urn:samm:../../../foo:bar# or urn:samm:/abs/path:bar#. This causes the loader to scan and parse arbitrary directories outside the intended models root, merging unintended .ttl files into the model graph.

Detection Guidance

Check for versions 2.1.2 to 2.2.1 of esmf-sdk-py-aspect-model-loader. Inspect Turtle files for malformed @prefix declarations like urn:samm:../../../foo:bar# or urn:samm:/abs/path:bar#. Use grep to search for suspicious patterns in .ttl files.

Impact Analysis

This vulnerability could allow an attacker to access sensitive data by merging contents of arbitrary .ttl files into the model graph. If the loader scans directories containing secrets or configuration files, those contents may be exposed. It could also enable further attacks by providing unintended data to the application.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR's data protection requirements or HIPAA's privacy rules. If personal or health data is exposed through the model graph, it may result in compliance breaches requiring notification and remediation.

Mitigation Strategies

Upgrade to a patched version of esmf-sdk-py-aspect-model-loader if available. Remove or restrict write access to Turtle files. Validate all @prefix declarations for proper namespace format. Implement input sanitization for model references.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92610. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...