CVE-2025-51480

HIGH

ONNX 1.17.0 - Path Traversal and Arbitrary File Write via External Data Location

Title source: llm
STIX 2.1

Description

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.

References (5)

Core 5
Core References
Exploit, Issue Tracking, Patch, Vendor Advisory
https://github.com/onnx/onnx/pull/6959
Exploit, Issue Tracking, Patch, Vendor Advisory
https://github.com/onnx/onnx/pull/7040
Exploit, Third Party Advisory
https://www.gecko.security/blog/cve-2025-51480

Scores

CVSS v3 8.8
EPSS 0.0037
EPSS Percentile 58.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-22
Status published
Products (1)
linuxfoundation/onnx 1.17.0
Published Jul 22, 2025
Tracked Since Feb 18, 2026