CVE Daily

CVE-2025-51480

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ...

High CVSS 8.8

Overview

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.

CWE: CWE-22 Published: 2025-07-22T16:15:30.660
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.8 (HIGH)
  • Detected tags: arb_write, path (tag impact: MODERATE)

Recommended actions:

  • Canonicalize path; block `..` traversal; use allowlists.

Recommended tools

Tags