{"data":{"id":"e4ade73a-d44b-417e-b2bb-dfeca6d9adec","title":"CVE-2026-49114: In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_da","summary":"ONNX (a machine learning model format) versions before 1.21.0 have a vulnerability in the 'save_external_data' function where it unsafely opens files for writing without proper protections. A local attacker with write access to the same directory can create a symlink (a shortcut to another file) that tricks the function into writing to sensitive files like SSH authorization keys or system configuration files instead of the intended target.","solution":"Fixed in version 1.21.0. Users should upgrade ONNX to version 1.21.0 or later.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-49114","publishedAt":"2026-08-21T16:17:17.863Z","cveId":"CVE-2026-49114","cweIds":["CWE-22","CWE-59","CWE-367"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["NVIDIA"],"affectedVendorsRaw":["ONNX"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-21T16:17:17.863Z","capecIds":["CAPEC-126","CAPEC-27"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}