« Volver al listado

CVE-2026-55832

Estado: AplazadaMedia (6.1)—

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled external_data location from an ONNX model through onnx/src/tensor.rs get_external_resources and joins the value to the model directory without rejecting absolute paths or parent directory components. Loading an untrusted model through model_for_path can therefore make onnx/src/data_resolver.rs MmapDataResolver open an arbitrary local file and place the file contents into model tensors or inference output.

Leer descripción completaMostrar menos

Attacker-controlled offset and length fields can also select an out-of-range mapping slice and cause a denial of service, but the flaw does not write files or execute code. This issue is fixed in versions 0.21.17, 0.22.3, and 0.23.2.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Tract — TractAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-55832",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-55832",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-09-14T18:12:49.766808Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "sonos",
          "product": "tract",
          "versions": [
            {
              "status": "affected",
              "version": "< 0.21.17"
            },
            {
              "status": "affected",
              "version": ">= 0.22.0, < 0.22.3"
            },
            {
              "status": "affected",
              "version": ">= 0.23.0, < 0.23.2"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-09-14T18:17:55.663",
  "references": [
    {
      "url": "https://github.com/sonos/tract/commit/5f994bcf3cec9b343830a975fedce177f9190d0f",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/commit/85f4fac23e43d417782e8ed9f9465be8474f5c98",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/commit/8fdacbd7abe4e6f929cadfe52e7f69e2227c0632",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/releases/tag/0.21.17",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/releases/tag/0.22.3",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/releases/tag/v0.23.2",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/security/advisories/GHSA-h668-6x6g-f8r5",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/security/advisories/GHSA-h668-6x6g-f8r5",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled external_data location from an ONNX model through onnx/src/tensor.rs get_external_resources and joins the value to the model directory without rejecting absolute paths or parent directory components. Loading an untrusted model through model_for_path can therefore make onnx/src/data_resolver.rs MmapDataResolver open an arbitrary local file and place the file contents into model tensors or inference output. Attacker-controlled offset and length fields can also select an out-of-range mapping slice and cause a denial of service, but the flaw does not write files or execute code. This issue is fixed in versions 0.21.17, 0.22.3, and 0.23.2."
    }
  ],
  "lastModified": "2026-09-30T19:57:08.043",
  "sourceIdentifier": "security-advisories@github.com"
}