CyberRota Analysis
AI-GeneratedThe 'save_external_data' function in ONNX versions prior to 1.21.0 is vulnerable to a symbolic link attack, allowing local attackers with write access to manipulate file paths and redirect writes to arbitrary files, such as user configuration files or SSH keys. This can lead to unauthorized access or privilege escalation for the victim. Organizations using affected versions of ONNX should prioritize upgrading to version 1.21.0 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_data location field and opens it for writing without 'O_NOFOLLOW/O_EXCL', after a non-atomic 'os.path.isfile()' check. A local attacker with write access to the directory where a victim serializes external data can deterministically pre-plant a symlink that is being followed, causing the victim's write to append to any file the victim can write, e.g. ~/.ssh/authorized_keys, cron files, or application configs. Fixed in 1.21.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)