CVE-2025-51480

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.

• CWE-22

• https://github.com/advisories/GHSA-6rq9-53c3-f7vjNot Applicable
• https://github.com/onnx/onnxProduct
• https://github.com/onnx/onnx/pull/6959Exploit, Issue Tracking, Patch, Vendor Advisory
• https://github.com/onnx/onnx/pull/7040Exploit, Issue Tracking, Patch, Vendor Advisory
• https://www.gecko.security/blog/cve-2025-51480Exploit, Third Party Advisory

Published

Jul 22, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-5147A vulnerability was found in Netcore NBR1005GPEV2, NBR200V2 …6.3
• CVE-2025-51471Cross-Domain Token Exposure in server.auth.getAuthorizationT…6.9
• CVE-2025-51472Code Injection in AgentTemplate.eval_agent_config in Transfo…6.5
• CVE-2025-51475Arbitrary File Overwrite (AFO) in superagi.controllers.resou…5
• CVE-2025-51479Authorization bypass in update_user_group in onyx-dot-app On…5.4
• CVE-2025-5148A vulnerability was found in FunAudioLLM InspireMusic up to …5.3
• CVE-2025-51481Local File Inclusion in dagster._grpc.impl.get_notebook_data…6.6
• CVE-2025-51482Remote Code Execution in letta.server.rest_api.routers.v1.to…8.8
• CVE-2025-51487A Stored Cross-Site Scripting (XSS) vulnerability exists in …4.5
• CVE-2025-51488A Stored Cross-Site Scripting (XSS) vulnerability exists in …4.9
• CVE-2025-51489A Stored Cross-Site Scripting (XSS) vulnerability exists in …5.4
• CVE-2025-5149A vulnerability was found in WCMS up to 8.3.11. It has been …8.1