CVE-2026-55832 Details

A path traversal vulnerability has been identified in the Tract ONNX inference toolkit, specifically in versions prior to 0.21.17, 0.22.3, and 0.23.2. The issue arises because the tract-onnx crate improperly handles the external_data 'location' from ONNX models. It passes this attacker-controlled value to the model directory without validating it, allowing for absolute paths or directory traversal sequences to be exploited. As a result, loading an untrusted ONNX model can lead to arbitrary file reads, with the file contents being injected into model tensors or the inference output. Additionally, the vulnerability can be exploited to cause a denial-of-service by manipulating offset and length fields to select out-of-range memory mappings, although this does not involve file writing or code execution.

Users can update to Tract versions 0.21.17, 0.22.3, or 0.23.2, where this vulnerability has been fixed.