CVE-2026-49114

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:42+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q56x-g2fj-4rj6...

DEBIAN-CVE-2026-49114

In ONNX before 1.21.0, the 'saveexternaldata' function builds the external-data file path from the model's externaldata location field and opens it for writing without 'ONOFOLLOW/OEXCL', after a non-atomic 'os.path.isfile' check. A local attacker with write access to the directory where a victim...