Keras models exported to ONNX contain local file system information in each nodes description property.

[hgs-clees]

Keras 3.8.0
Torch 2.5.1
onnx 1.17.0

After exporting a Keras model to ONNX, all ONNX model nodes expose local system file paths in the nodes description. This is a security issue and seems like a possible debugging use case that was maybe left in the release, I'm speculating.

Exporting models with the following.

model.export(onnx_file, format='onnx')

Using https://netron.app/ to visualize the exported model, select a non-input or non-output nodes you will see file references for the given node listed under node properties description.

To mitigate the issue, I'm doing the following.

import onnx
filepath = '/path/to/exported/model.onnx'
model = onnx.load(filepath)

for node in model.graph.node:
    node.doc_string = ""

onnx.save(model, filepath)

A scrubbed example of a Cast node is seen below.

C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\backend\torch\core.py(202): convert_to_tensor
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\ops\core.py(952): convert_to_tensor
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\models\functional.py(246): _convert_inputs_to_tensors
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\models\functional.py(320): _standardize_inputs
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\models\functional.py(174): call
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\utils\traceback_utils.py(156): error_handler
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\ops\operation.py(46): __call__
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\utils\traceback_utils.py(117): error_handler
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\backend\torch\layer.py(44): forward
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\nn\modules\module.py(1726): _slow_forward
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\nn\modules\module.py(1747): _call_impl
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\nn\modules\module.py(1736): _wrapped_call_impl
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\layers\layer.py(908): __call__
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\utils\traceback_utils.py(117): error_handler
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\jit\_trace.py(130): wrapper
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\jit\_trace.py(139): forward
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\nn\modules\module.py(1747): _call_impl
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\nn\modules\module.py(1736): _wrapped_call_impl
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\jit\_trace.py(1500): _get_trace_graph
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\onnx\utils.py(904): _trace_and_get_graph_from_model
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\onnx\utils.py(997): _create_jit_graph
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\onnx\utils.py(1113): _model_to_graph
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\onnx\utils.py(1564): _export
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\onnx\utils.py(502): export
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\torch\onnx\__init__.py(375): export
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\export\onnx.py(98): export_onnx
C:\Users\SCRUBBED\python_environments\SCRUBBED\lib\site-packages\keras\src\models\model.py(547): export
C:\Users\SCRUBBED\Desktop\SCRUBBED\SCRUBBED\SCRUBBED.py(36): SCRUBBED
C:\Users\SCRUBBED\Desktop\SCRUBBED\SCRUBBED\SCRUBBED.py(129): SCRUBBED
C:\Users\SCRUBBED\Desktop\SCRUBBED\SCRUBBED\SCRUBBED.py(147): main
C:\Users\SCRUBBED\Desktop\SCRUBBED\SCRUBBED\SCRUBBED.py(153): <module>

[google-ml-butler]

Are you satisfied with the resolution of your issue?
Yes
No