CVE-2026-49114: In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_da

ONNX (a machine learning model format) versions before 1.21.0 have a vulnerability in the 'save_external_data' function where it unsafely opens files for writing without proper protections. A local attacker with write access to the same directory can create a symlink (a shortcut to another file) that tricks the function into writing to sensitive files like SSH authorization keys or system configuration files instead of the intended target.