Vulnerability · Published Nov 3, 2026 · Assigned by eclipse
CVE-2026-92610Improper limitation of paths in py-aspect-model-loader
Unrated
In plain English
A path traversal in Eclipse Semantic Modeling Framework (ESMF) from Eclipse Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Official description
In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references by extracting the third and fourth colon-separated components of any urn:samm:… namespace declared in a parsed Turtle file to build a directory to scan. A model file containing @prefix x: <urn:samm:../../../foo:bar#> or @prefix x: <urn:samm:/abs/path:bar#> causes the loader to glob and parse *.ttl files from arbitrary directories outside the intended models root, merging their contents into the returned graph.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Eclipse Foundation | Eclipse Semantic Modeling Framework (ESMF) | 2.1.2 – through 2.2.1 |
Weakness: CWE-22