CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2025-51480
High (8.8) in linuxfoundation onnx. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in onnx 1.16.2.
Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- linuxfoundation:onnx
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6rq9-53c3-f7vj | PyPI | onnx | <1.16.2 | 1.16.2 |
| PYSEC-2025-148 | PyPI | onnx | <=1.17.0 | no fix published |