PT-2025-12192 · Onnx+1 · Onnx+1

Published 2025-03-20 · Updated 2025-03-26 · CVE-2024-7776

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions onnx/onnx framework version 1.16.1 and earlier

Description A vulnerability in the download model function of the onnx/onnx framework allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This issue can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.

Recommendations For onnx/onnx framework version 1.16.1 and earlier, update to a version later than 1.16.1 to resolve the issue. As a temporary workaround, consider disabling the download model function until a patch is available. Restrict access to malicious tar files to minimize the risk of exploitation. Avoid using the download model function with untrusted input until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

AZL-59201

CVE-2024-7776

GHSA-H36J-8VV3-CJ52

PYSEC-2025-10

Affected Products

Debian

Onnx

References · 20

• 🔥 https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63 · Exploit
• https://osv.dev/vulnerability/AZL-59201 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-7776 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-7776 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7776 · Security Note
• https://osv.dev/vulnerability/PYSEC-2025-10 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-7776 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-7776 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-7776 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-7776 · Security Note
• https://osv.dev/vulnerability/GHSA-h36j-8vv3-cj52 · Vendor Advisory
• https://github.com/onnx/onnx · Note
• https://github.com/onnx/onnx/commit/1b70f9b673259360b6a2339c4bd97db9ea6e552f · Note
• https://github.com/onnx/onnx/issues/6215 · Note
• https://github.com/onnx/onnx/pull/6222 · Note