CVE-2026-27489
published 2026-04-01CVE-2026-27489: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via…
PriorityP349high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.59%
45.0th percentile
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | onnx | — | — |
| linuxfoundation | onnx | < 1.21.0 | 1.21.0 |
| onnx | onnx | < 1.21.0 | 1.21.0 |
| onnx | onnx | >= 0 < 1.21.0 | 1.21.0 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv4.08.7HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
osv8.7HIGH
vendor_debian8.7HIGH
vendor_redhat8.7HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
onnx up to 1.20.x path traversal (GHSA-3r9x-f23j-gc73)
vuldb·2026-07-02·CVSS 7.5
CVE-2026-27489 [HIGH] onnx up to 1.20.x path traversal (GHSA-3r9x-f23j-gc73)
A vulnerability categorized as problematic has been discovered in onnx up to 1.20.x. Affected by this issue is some unknown functionality. Such manipulation leads to relative path traversal.
This vulnerability is referenced as CVE-2026-27489. It is possible to launch the attack remotely. No exploit is available.
It is advisable to upgrade the affected component.
OSV
CVE-2026-27489: (Open Neural Network Exchange (ONNX) is an open standard for machine le
osv·2026-04-02·CVSS 8.7
CVE-2026-27489 [HIGH] CVE-2026-27489: (Open Neural Network Exchange (ONNX) is an open standard for machine le
(Open Neural Network Exchange (ONNX) is an open standard for machine le ...)
OSV
CVE-2026-27489: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
osv·2026-04-01·CVSS 8.7
CVE-2026-27489 [HIGH] CVE-2026-27489: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.
GHSA
onnx Vulnerable to Path Traversal via Symlink
ghsa·2026-03-31
CVE-2026-27489 [HIGH] CWE-23 onnx Vulnerable to Path Traversal via Symlink
onnx Vulnerable to Path Traversal via Symlink
### Summary
A path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory.
### Details
The following check for symlink is ineffective and it is possible to point a symlink to an arbitrary location on the file system:
https://github.com/onnx/onnx/blob/336652a4b2ab1e530ae02269efa7038082cef250/onnx/checker.cc#L1024-L1033
`std::filesystem::is_regular_file` performs a `status(p)` call on the provided path, which follows symbolic links to determine the file type, meaning it will return true if the target of a symlink is a regular file.
### PoC
```python
# Create a demo model with external data
import os
import numpy as np
import onnx
from onnx import helper, TensorProto, numpy_helper
def cr
OSV
onnx Vulnerable to Path Traversal via Symlink
osv·2026-03-31
CVE-2026-27489 [HIGH] onnx Vulnerable to Path Traversal via Symlink
onnx Vulnerable to Path Traversal via Symlink
### Summary
A path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory.
### Details
The following check for symlink is ineffective and it is possible to point a symlink to an arbitrary location on the file system:
https://github.com/onnx/onnx/blob/336652a4b2ab1e530ae02269efa7038082cef250/onnx/checker.cc#L1024-L1033
`std::filesystem::is_regular_file` performs a `status(p)` call on the provided path, which follows symbolic links to determine the file type, meaning it will return true if the target of a symlink is a regular file.
### PoC
```python
# Create a demo model with external data
import os
import numpy as np
import onnx
from onnx import helper, TensorProto, numpy_helper
def cr
Red Hat
onnx: ONNX: Information Disclosure via Path Traversal Vulnerability
vendor_redhat·2026-04-01·CVSS 8.7
CVE-2026-27489 [HIGH] CWE-22 onnx: ONNX: Information Disclosure via Path Traversal Vulnerability
onnx: ONNX: Information Disclosure via Path Traversal Vulnerability
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.
A flaw was found in Open Neural Network Exchange (ONNX), an open standard for machine learning interoperability. This path traversal vulnerability, exploitable via a symbolic link (symlink), allows an attacker to read arbitrary files located outside of the intended model or user-provided directories. This could lead to unauthorized information disclosure.
Package: rhoai/odh-openvino-model-server-rhel9 (Red Hat OpenShift AI (RHOAI)) - Affected
Debian
CVE-2026-27489: onnx - Open Neural Network Exchange (ONNX) is an open standard for machine learning int...
vendor_debian·2026·CVSS 8.7
CVE-2026-27489 [HIGH] CVE-2026-27489: onnx - Open Neural Network Exchange (ONNX) is an open standard for machine learning int...
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-27489 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.7
CVE-2026-27489 [HIGH] CVE-2026-27489 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-27489 :
Python vulnerability analysis and mitigation
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.
Source : NVD
## 8.7
Score
Published April 1, 2026
Severity HIGH
CNA Score 8.7
Affected Technologies
Python
Linux Debian
Has Public Exploit Yes
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 24.1
Exploitation Probability (EPSS) 0.1
Affected packages and libraries
onnx
Sources
NVD
Debian 11, 12, 13, 14 No Fix Added at: Apr 05, 2026
Echo No Fix Added at: Apr 0
Bugzilla
CVE-2026-27489 onnx: ONNX: Information Disclosure via Path Traversal Vulnerability [fedora-42]
bugzilla·2026-04-02·CVSS 8.7
CVE-2026-27489 [HIGH] CVE-2026-27489 onnx: ONNX: Information Disclosure via Path Traversal Vulnerability [fedora-42]
CVE-2026-27489 onnx: ONNX: Information Disclosure via Path Traversal Vulnerability [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '42'.
Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, ch
https://github.com/onnx/onnx/commit/4755f8053928dce18a61db8fec71b69c74f786cbhttps://github.com/onnx/onnx/security/advisories/GHSA-3r9x-f23j-gc73https://access.redhat.com/errata/RHSA-2026:24977https://access.redhat.com/security/cve/CVE-2026-27489https://bugzilla.redhat.com/show_bug.cgi?id=2453929https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27489.json
2026-04-01
Published