Severity
9.1CRITICALNVD
CNA8.6
EPSS
0.0%
top 98.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 18

Description

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load() due to improper logic in the repository trust verification mechanism. While the function is designed to warn users when loading models from non-official sources, the use of the silent=True parameter completely suppresses all security warnings and confirmation prompts. This vulnerability transforms a standard mod

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 3.9 | Impact: 5.2

Affected Packages3 packages

PyPIonnx/onnx< 1.21.0
CVEListV5onnx/onnx1.20.1

Patches

🔴Vulnerability Details

4
CVEList
ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack2026-03-18
OSV
CVE-2026-28500: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability2026-03-18
OSV
ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack2026-03-16
GHSA
ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack2026-03-16

📋Vendor Advisories

2
Red Hat
onnx: ONNX: Untrusted Model Repository Warnings Suppressed2026-03-18
Debian
CVE-2026-28500: onnx - Open Neural Network Exchange (ONNX) is an open standard for machine learning int...2026

🕵️Threat Intelligence

1
Wiz
CVE-2026-28500 Impact, Exploitability, and Mitigation Steps | Wiz
CVE-2026-28500 — Onnx vulnerability | cvebase