CVE-2024-7776: Arbitrary File Overwrite in onnx/onnx
First published: Thu Mar 20 2025(Updated: )
A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.
Credit: security@huntr.dev
| Affected Software | Affected Version | How to fix |
|---|---|---|
| pip/onnx | <1.17.0 | 1.17.0 |
| ONNX | <=1.16.1 | |
| ONNX | <=1.16.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63
- https://nvd.nist.gov/vuln/detail/CVE-2024-7776
- https://github.com/onnx/onnx/pull/6222
- https://github.com/onnx/onnx/commit/1b70f9b673259360b6a2339c4bd97db9ea6e552f
- https://github.com/pypa/advisory-database/tree/main/vulns/onnx/PYSEC-2025-10.yaml
- https://github.com/advisories/GHSA-h36j-8vv3-cj52 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2024-7776?
CVE-2024-7776 has been classified as a high severity vulnerability due to its potential for arbitrary file overwrite.
How do I fix CVE-2024-7776?
To remediate CVE-2024-7776, upgrade to onnx version 1.17.0 or later.
Which versions of ONNX are affected by CVE-2024-7776?
CVE-2024-7776 affects ONNX versions up to and including 1.16.1.
What kind of attack does CVE-2024-7776 enable?
CVE-2024-7776 allows for path traversal attacks through malicious tar files, resulting in arbitrary file overwrite.
Who is impacted by CVE-2024-7776?
Developers and users of ONNX versions 1.16.1 and earlier are at risk due to CVE-2024-7776.
- agent/title
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/source
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/guess-ai
- agent/softwarecombine
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-h36j-8vv3-cj52
- alias/CVE-2024-7776
- agent/tags
- collector/nvd-cve
- agent/event
- collector/github-advisory
- vendor/onnx
- canonical/onnx
- version/onnx/1.16.1
- package-manager/pip