Description
A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.
Published: 2025-03-20
Score: 9.1 Critical
EPSS: 1.5% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-6946 A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.
Github GHSA Github GHSA GHSA-h36j-8vv3-cj52 Open Neural Network Exchange (ONNX) Path Traversal Vulnerability
History

Wed, 26 Mar 2025 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Onnx
Onnx onnx
CPEs cpe:2.3:a:onnx:onnx:*:*:*:*:*:*:*:*
Vendors & Products Onnx
Onnx onnx
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H'}

Thu, 20 Mar 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 20 Mar 2025 10:15:00 +0000

Type Values Removed Values Added
Description A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.
Title Arbitrary File Overwrite in onnx/onnx
Weaknesses CWE-22
References
Metrics cvssV3_0

{'score': 8.1, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H'}

Subscriptions

Onnx Onnx
cve-icon MITRE

Status: PUBLISHED

Assigner: @huntr_ai

Published:

Updated: 2025-03-20T15:52:00.491Z

Reserved: 2024-08-13T21:28:43.911Z

Link: CVE-2024-7776

cve-icon Vulnrichment

Updated: 2025-03-20T15:51:52.199Z

cve-icon NVD

Status : Analyzed

Published: 2025-03-20T10:15:37.520

Modified: 2025-03-26T17:20:27.680

Link: CVE-2024-7776

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses