{"affected":[{"defaultStatus":"unaffected","product":"Eclipse Semantic Modeling Framework (ESMF)","source":"CNA: eclipse","vendor":"Eclipse Foundation","versions":[{"lessThanOrEqual":"2.2.1","status":"affected","version":"2.1.2","versionType":"semver"}]}],"cveId":"CVE-2026-92610","cwes":["CWE-22"],"description":"In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references by extracting the third and fourth colon-separated components of any urn:samm:… namespace declared in a parsed Turtle file to build a directory to scan. A model file containing @prefix x: <urn:samm:../../../foo:bar#> or @prefix x: <urn:samm:/abs/path:bar#> causes the loader to glob and parse *.ttl files from arbitrary directories outside the intended models root, merging their contents into the returned graph.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793695374156,"publishedAt":1793695374156,"references":[{"source":"CNA: eclipse","tags":[],"url":"https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/969"},{"source":"CNA: eclipse","tags":[],"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/309"}],"remediation":[],"revision":"4c2d0da65b633d47bbcabfacb2389fca03806aaacaffad70e0a78f26866b084f","sources":[{"modifiedAt":1793695374156,"name":"CNA: eclipse","retrievedAt":1793696945212,"url":"https://www.cve.org/CVERecord?id=CVE-2026-92610"}],"ssvc":null,"status":"published","title":"Improper limitation of paths in py-aspect-model-loader","updatedAt":1793696945212}