CVE-2024-0817 is a high severity (CVSS 7.8) command injection in PaddlePaddle 2.6.0, in the IrGraph.draw function. The record names no fixed version. Upgrade to the latest release, keep untrusted input away from the function, and check the project advisory for patch details.
What's affected
PaddlePaddle 2.6.0, in IrGraph.draw. The record calls it a command injection and its only reference is a huntr bounty page. No fixed version is listed, so confirm in the release notes which release changes the function.
The vector in the record is local, with user interaction required, which suggests an attacker needs to influence input that a user then processes.
The record classifies the weakness as CWE-77 (command injection). NVD scores it 7.8 (High) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
How to check if you're exposed
Check which version of the package is installed in each environment, including virtual environments, notebooks and container images:
pip show paddlepaddle
pip list --format=freeze | grep -i paddle
Search your repositories for requirement files and lock files that pin the package. A pinned version in a lock file is what actually ships, so read that rather than the loose range in a requirements file. The free in-browser dependency scan can do this for a repository and flag known advisories for the packages it finds.
What to do now
- Locate every environment running paddlepaddle 2.6.0.
- Upgrade to the latest release and read its notes for IrGraph changes.
- Avoid calling IrGraph.draw with names or paths derived from untrusted input.
- Run graph visualisation jobs in a sandbox or container without access to secrets.
Why it matters
Command injection (CWE-77) is the general form of shell command injection: an attacker influenced string reaches a command interpreter. Drawing a graph usually calls an external tool such as a renderer, and any text passed along must be treated as data, not as command syntax.
The local vector and required user interaction lower the score to the high range. Shared notebooks and CI pipelines are the places where untrusted input is most likely.
The record does not mark this CVE as being in the CISA Known Exploited Vulnerabilities catalog, and nothing in the record says it is exploited in the wild. That can change, so keep it on your watch list.
Quick check
What should I check first?
Which environments run 2.6.0, and whether any code passes external input to IrGraph.draw.
Sources
The links below are the references listed in the CVE record. The record and its description were the basis for this post, and the vendor advisory remains the authority for fixed versions.
Last reviewed: 19 October 2026.
