{ "session_definition": { "format": "TensorRT ONNX external data", "target_impact": "path traversal / controlled local file read through external weights", "workspace": "C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt" }, "versions": { "python": "3.12.12 (main, Oct 28 2025, 14:15:42) [MSC v.1944 64 bit (AMD64)]", "tensorrt": "10.16.1.11", "onnx": "1.21.0" }, "artifact": { "model_path": "C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\model_dir\\model.onnx", "model_sha256": "05340543e4e7216db0bb4c10b3ac6701777931e6def0df3a7a68e995402af640", "model_size": 169, "marker_path": "C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\controlled_sensitive_marker.bin", "marker_sha256": "d486a60053f484720bd63ca722d0504219f110e77ca974e10b9432d76567a0ad", "marker_size": 64, "symlink_path": "C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\model_dir\\weights_link.bin", "symlink_target": "\\\\?\\C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\controlled_sensitive_marker.bin", "symlink_resolved_target": "C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\controlled_sensitive_marker.bin" }, "onnx_validation": { "checker": { "passed": false, "error_type": "ValidationError", "message": "Data of TensorProto ( tensor name: W) should be stored in C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\model_dir\\weights_link.bin, but it is a symbolic link." }, "load_external_data": { "passed": false, "error_type": "ValidationError", "message": "Data of TensorProto ( tensor name: W) should be stored in C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\model_dir\\weights_link.bin, but it is a symbolic link." }, "model_external_data": [ [ "location", "weights_link.bin" ], [ "offset", "0" ], [ "length", "64" ] ] }, "modelscan": { "cmd": [ "C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\.venv\\Scripts\\python.exe", "-m", "modelscan.cli", "-p", "C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\model_dir\\model.onnx", "-r", "json", "-o", "C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\modelscan.json", "--show-skipped" ], "returncode": 3, "stdout": "No settings file detected at C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\modelscan-settings.toml. Using defaults. \n\n{\"summary\": {\"total_issues_by_severity\": {\"LOW\": 0, \"MEDIUM\": 0, \"HIGH\": 0, \n\"CRITICAL\": 0}, \"total_issues\": 0, \"input_path\": \n\"C:\\\\Users\\\\Pragnyan\\\\dev\\\\huntr-exp1\\\\tensorrt\\\\lab\\\\onnx_symlink_lfr\\\\model_d\nir\\\\model.onnx\", \"absolute_path\": \n\"C:\\\\Users\\\\Pragnyan\\\\dev\\\\huntr-exp1\\\\tensorrt\\\\lab\\\\onnx_symlink_lfr\\\\model_d\nir\", \"modelscan_version\": \"0.8.8\", \"timestamp\": \"2026-05-12T11:05:21.488471\", \n\"scanned\": {\"total_scanned\": 0}, \"skipped\": {\"total_skipped\": 1, \n\"skipped_files\": [{\"category\": \"SCAN_NOT_SUPPORTED\", \"description\": \"Model Scan\ndid not scan file\", \"source\": \"model.onnx\"}]}}, \"issues\": [], \"errors\": []}\n", "stderr": "", "output_file": "C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\modelscan.json", "output_json": { "summary": { "total_issues_by_severity": { "LOW": 0, "MEDIUM": 0, "HIGH": 0, "CRITICAL": 0 }, "total_issues": 0, "input_path": "C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\model_dir\\model.onnx", "absolute_path": "C:\\Users\\Pragnyan\\dev\\huntr-exp1\\tensorrt\\lab\\onnx_symlink_lfr\\model_dir", "modelscan_version": "0.8.8", "timestamp": "2026-05-12T11:05:21.488471", "scanned": { "total_scanned": 0 }, "skipped": { "total_skipped": 1, "skipped_files": [ { "category": "SCAN_NOT_SUPPORTED", "description": "Model Scan did not scan file", "source": "model.onnx" } ] } }, "issues": [], "errors": [] } }, "tensorrt": { "parse_ok": true, "parse_errors": [], "build_ok": true, "engine_bytes": 9844, "execute_ok": true, "inference_output": [ [ 1234.5, 2345.5, 3456.5, 4567.5 ] ], "expected_marker": [ [ 1234.5, 2345.5, 3456.5, 4567.5 ] ], "marker_match": true } }