Symlink Vulnerability in ONNX Affects Data Integrity
CVE-2026-49114
Key Information:
Badges
What is CVE-2026-49114?
In ONNX versions prior to 1.21.0, a vulnerability exists in the 'save_external_data' function that allows a local attacker to exploit symlinks when writing external data. This issue arises because the function constructs the file path from the model's external_data location field and opens it without proper checks like 'O_NOFOLLOW/O_EXCL', following a non-atomic file existence check with 'os.path.isfile()'. An attacker with write access to the directory where the external data is serialized can create a pre-placed symlink, leading to unintentional writes to arbitrary files, such as the user's ~/.ssh/authorized_keys or configuration files. The issue was addressed in version 1.21.0, which enhances security measures against such exploits.
Affected Version(s)
ONNX 0 < 1.21.0
ONNX 1.21.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved