CVE-2024-27318highCWE-22

CVE-2024-27318: high-severity vulnerability in onnx

Published · Updated

Follow this CVE+ Monitor onnx+ Monitor onnx

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.2%
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for CVE-2022-25882.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
onnx · onnx
Related CVEs — onnx

In the same product, most dangerous first.

CVE-2026-27489HIGHONNX: Path Traversal via SymlinkEPSS 0.6%CVE-2024-27319MEDIUMCVE-2024-27319EPSS 0.6%CVE-2026-28500HIGHONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain AttackEPSS 0.3%CVE-2026-34445HIGHONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.EPSS 0.3%CVE-2026-34447MEDIUMONNX: External Data Symlink TraversalEPSS 0.3%CVE-2026-44512MEDIUMONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)EPSS 0.2%