Live › vulnerability › CVE-2026-92610
The esmf-sdk-py-aspect-model-loader Python package, versions 2.1.2 to 2.2.1, builds scan directories from urn:samm namespace text inside a parsed Turtle model file. A crafted namespace with path traversal or an absolute path makes it glob and parse other .ttl files outside the models root and merge them into the loaded graph.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 09:19 UTC. All times on this page are UTC.
Teams that load Aspect Model Turtle files with esmf-sdk-py-aspect-model-loader 2.1.2 through 2.2.1 are exposed, most of all if model files come from users or outside sources. Systems that only load models they author and store themselves are less exposed, since the flaw needs a crafted namespace declaration in a model file. unknown whether any default configuration matters beyond this.
No product ranges from the sources yet.
pip show esmf-sdk-py-aspect-model-loader or the version pinned in your lock file.2.2.1; the sources do not name the fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references by extracting the third and fourth colon-separated components of any urn:samm:… namespace declared in a parsed Turtle file to build a directory to scan. A model file containing @prefix x: urn:samm:../../../foo:bar# or @prefix x: urn:samm:/abs/path:bar# causes the loader to glob and parse *.ttl files from arbitrary directories outside the intended models root, merging their contents into the returned graph.
This page as .md · .json · in your agent: get_signal("CVE-2026-92610")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.