onnxruntime icon indicating copy to clipboard operation
onnxruntime copied to clipboard

Address security issue of loading arbitrary files as external data

Open yuslepukhin opened this issue 4 weeks ago • 0 comments

Description

Verify external data references in TensorProto specify data location that is under the model directory structure, reject absolute paths and paths that escape the model path. Make the validation function available to bridge based EPs. Expose ExternalDataInfo via a bridge to some EPs that choose to handle the data itself.

Motivation and Context

This is a security concern.

yuslepukhin avatar Dec 12 '25 01:12 yuslepukhin