CVE-2024-27318: Directory Traversal in ONNX Runtime

Successful exploitation of CVE-2024-27318 allows an attacker to read sensitive files outside the intended model directory. This could include configuration files, credentials, or other data that could be used to compromise the system or network. The impact is particularly severe in environments where ONNX Runtime is used to process untrusted data, such as in machine learning inference pipelines. An attacker could potentially gain access to the underlying file system, leading to data exfiltration or further system compromise. The bypass nature of this vulnerability, circumventing a previous fix, increases the likelihood of exploitation.

1. Reserved2024-02-23
2. Published2024-02-23
3. Modified2026-02-04
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-27318 is to upgrade to ONNX Runtime version 1.16.0 or later. If upgrading is not immediately feasible, consider implementing strict file access controls to limit the directories accessible by ONNX Runtime processes. Additionally, carefully validate any external data used by ONNX Runtime to ensure it does not contain malicious file paths. While a WAF is unlikely to directly address this vulnerability, input validation at the application layer is crucial. There are no specific Sigma or YARA rules readily available for this vulnerability, emphasizing the need for robust input validation.