ONNXGHSA-h36j-8vv3-cj52
Open Neural Network Exchange (ONNX) Path Traversal Vulnerability
High8.1CVE-2024-7776 · Published Mar 20, 2025 · updated Mar 27, 2025
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| onnx PyPI | < 1.17.0 | 1.17.0 |
Details and references
A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-22
- Also known as
- CVE-2024-7776, PYSEC-2025-10
More ONNX advisories
All ONNX| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 62024 | onnx allows Arbitrary File Overwrite in download_model_with_test_data CVE-2024-5187High8.8fixed in 1.16.2 | High8.8 | 1.16.2 |
| Mar 16 | ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() , Silent Supply-Chain Attack CVE-2026-28500High8.6fixed in 1.21.0rc1 | High8.6 | 1.21.0rc1 |
| Mar 31 | onnx Vulnerable to Path Traversal via Symlink CVE-2026-27489Highfixed in 1.21.0 | High | 1.21.0 |
| Apr 1 | ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings. CVE-2026-34445High8.6fixed in 1.21.0 | High8.6 | 1.21.0 |
| Apr 1 | ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load CVE-2026-34446Medium4.7fixed in 1.21.0 | Medium4.7 | 1.21.0 |
| Apr 1 | ONNX: External Data Symlink Traversal CVE-2026-34447Medium5.5fixed in 1.21.0 | Medium5.5 | 1.21.0 |