Open Neural Network Exchange (ONNX) Pfadüberschreitungs-Schwachstelle

An attacker exploiting CVE-2024-7776 can leverage path traversal techniques to overwrite arbitrary files within the user's directory where the onnx framework is installed. This could involve overwriting critical configuration files, executables, or even system binaries. Successful exploitation could lead to remote command execution, allowing the attacker to gain control of the affected system. The blast radius extends to any system running vulnerable versions of the onnx framework and accessible to a malicious actor capable of providing a crafted tar file.

Python developers and systems administrators using the onnx framework in their applications are at risk. This includes those deploying machine learning models or applications that rely on the onnx format. Shared hosting environments where multiple users share the same file system are particularly vulnerable, as a malicious tar file uploaded by one user could potentially impact others.

• python / supply-chain:

import os
import tarfile

def check_onnx_vulnerability(tar_file_path):
    try:
        with tarfile.open(tar_file_path, 'r') as tar:
            for member in tar.getmembers():
                if '../' in member.name:
                    print(f"Potential path traversal detected in: {member.name}")
                    return True
    except Exception as e:
        print(f"Error processing tar file: {e}")
        return False

# Example usage:
# Replace with the path to a potentially malicious tar file
tar_file = 'malicious.tar.gz'
if check_onnx_vulnerability(tar_file):
    print("Vulnerability likely present.")
else:
    print("No immediate path traversal detected.")

• generic web: Check for unusual file downloads or modifications in web server access logs, especially those related to model downloads.

1. 2025-03-20Disclosure

   disclosure

1. Reserviert2024-08-13
2. Veröffentlicht2025-03-20
3. Geändert2025-03-27
4. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-7776 is to upgrade to version 1.17.0 or later of the onnx framework. If upgrading is not immediately feasible, consider implementing input validation on the download_model function to sanitize file paths and prevent path traversal attempts. Additionally, restrict write access to the user's directory where the onnx framework is installed. Monitor system logs for suspicious file modification activity, particularly within the user's directory. After upgrading, confirm the fix by attempting to download a model with a specially crafted tar file containing path traversal sequences; the download should fail with an appropriate error.