CVE-2026-55832

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

CVE-2026-55832

Tract (tract-onnx crate, a Rust inference toolkit for TensorFlow/ONNX) is vulnerable to arbitrary local file read when loading an untrusted ONNX model. The external_data location field is joined to the model directory via Path::join without rejecting absolute paths or .. components, so the defaul...

CVE-2026-55832 Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

CVE-2026-55832 Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

EUVD-2026-77721

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

CVE-2026-55832 Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

CVE-2026-55832

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

CVE-2026-55832: Improper Limitation of a Pathname to a Restricted Directory

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx

Summary tract the tract-onnx crate resolves an ONNX tensor's external-data location by joining it onto the model directory without any sanitization. Because location comes from the untrusted .onnx file, a malicious model can make tract open and read an arbitrary local file at load time, with the...

tract (>=0.1.1, <=0.5.7) potentially affected by CVE-2026-55832 via tract-onnx (>=0.1.1, <=0.5.7)

tract-onnx CARGO version =0.1.1, =0.1.1, =0.5.7 Source cves: CVE-2026-55832 Source advisory: OSV:GHSA-H668-6X6G-F8R5...

tract (>=0.1.1, <=0.5.7) potentially affected by CVE-2026-55832 via tract-onnx (>=0.1.1, <=0.5.7)

tract-onnx CARGO version =0.1.1, =0.1.1, =0.5.7 Source cves: CVE-2026-55832 Source advisory: GHSA-H668-6X6G-F8R5...

tract-hir (>=0.11.0, <=0.12.5), tract-kaldi (>=0.11.0, <=0.20.7) +4 more potentially affected by CVE-2026-55093 via tract-nnef (>=0.11.2, <=0.20.7)

tract-nnef CARGO version =0.11.2, =0.11.0, =0.11.0, =0.19.10, =0.11.0, =0.11.0, =0.11.0, =0.20.7 Source cves: CVE-2026-55093 Source advisory: GHSA-X5MV-8WGW-29HG...

tract-hir (>=0.11.0, <=0.12.5), tract-kaldi (>=0.11.0, <=0.20.7) +4 more potentially affected by CVE-2026-55093 via tract-nnef (>=0.11.2, <=0.20.7)

tract-nnef CARGO version =0.11.2, =0.11.0, =0.11.0, =0.19.10, =0.11.0, =0.11.0, =0.11.0, =0.20.7 Source cves: CVE-2026-55093 Source advisory: OSV:GHSA-X5MV-8WGW-29HG...

tract-hir (>=0.11.0, <=0.12.5), tract-kaldi (>=0.11.0, <=0.20.7) +4 more potentially affected by CVE-2026-55093 via tract-nnef (>=0.11.2, <=0.20.7)

tract-nnef CARGO version =0.11.2, =0.11.0, =0.11.0, =0.19.10, =0.11.0, =0.11.0, =0.11.0, =0.20.7 Source cves: CVE-2026-55093 Source advisory: OSV:RUSTSEC-2026-0217...