CVE-2024-5187: Arbitrary File Access in onnx Framework

The vulnerability lies within the downloadmodelwithtestdata function, which handles tar file extraction without proper validation of file paths. An attacker can craft a malicious tar archive containing paths designed to overwrite arbitrary files on the system. This could involve overwriting critical system files, configuration files, or application data, leading to a complete system takeover. The potential impact extends beyond data corruption; successful file overwrites could facilitate remote code execution, allowing an attacker to execute arbitrary commands with the privileges of the process running the onnx framework. This vulnerability shares similarities with other path traversal exploits where attackers manipulate file paths to access or modify unauthorized resources.

1. Reserved2024-05-21
2. Published2024-06-06
3. Modified2025-10-09
4. EPSS updated2026-04-02

The primary mitigation is to upgrade to version 1.16.2 or later, which includes the necessary security fixes. If upgrading immediately is not feasible, consider implementing temporary workarounds. One approach is to restrict the directories where the onnx framework can extract tar files, limiting the potential impact of a successful attack. Additionally, implement strict input validation on any tar files processed by the framework, verifying that the extracted paths are within expected boundaries. Consider using a Web Application Firewall (WAF) to filter out malicious tar files containing suspicious path patterns. After upgrading, confirm the fix by attempting to extract a known malicious tar file and verifying that the file access is denied.