CVE-2025-51480: Path Traversal
Published Jul 22, 2025
·Updated
Path Traversal vulnerability in onnx.externaldatahelper.saveexternaldata in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted externaldata.location paths containing traversal sequences, bypassing intended directory restrictions.
Affected Software
8 affected componentsFixes available
onnx onnx
linuxfoundation Onnx=1.17.0
Microsoft azl3 pytorch 2.2.2-7
Microsoft cbl2 pytorch 2.0.0-9
Microsoft cbl2 pytorch 2.0.0-11
Microsoft azl3 pytorch 2.2.2-9
Microsoft azl3 pytorch 2.2.2-10
Microsoft azl3 pytorch 2.2.2-14
Remediation
Patch Available
Patch Available
Event History
Jul 22, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 4, 2025
Data Sourced
via Microsoft·04:33 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·04:33 AM
Affected Software
Updated
via Microsoft·11:33 AM
DescriptionSeverity
Updated
via Microsoft·11:33 AM
Affected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-51480?
CVE-2025-51480 is classified as a high severity vulnerability due to its potential for arbitrary file overwriting.
2
How do I fix CVE-2025-51480?
To fix CVE-2025-51480, update to the latest version of ONNX where the vulnerability has been patched.
3
What type of vulnerability is CVE-2025-51480?
CVE-2025-51480 is a Path Traversal vulnerability.
4
Which versions of ONNX are affected by CVE-2025-51480?
CVE-2025-51480 affects ONNX version 1.17.0.
5
Can exploiting CVE-2025-51480 lead to further attacks?
Yes, exploiting CVE-2025-51480 can lead to unauthorized file access and potentially allow further attacks on the system.