CVE-2026-34447
published 2026-04-01CVE-2026-34447: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal…
PriorityP426medium5.5CVSS 3.1
AVLACLPRNUIRSUCHINAN
EPSS
0.25%
16.3th percentile
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | onnx | — | — |
| linuxfoundation | onnx | < 1.21.0 | 1.21.0 |
| onnx | onnx | < 1.21.0 | 1.21.0 |
| onnx | onnx | >= 0 < 1.21.0 | 1.21.0 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
osv5.5MEDIUM
vendor_debian5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2026-34447: (Open Neural Network Exchange (ONNX) is an open standard for machine le
osv·2026-04-02·CVSS 5.5
CVE-2026-34447 [MEDIUM] CVE-2026-34447: (Open Neural Network Exchange (ONNX) is an open standard for machine le
(Open Neural Network Exchange (ONNX) is an open standard for machine le ...)
OSV
CVE-2026-34447: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
osv·2026-04-01·CVSS 5.5
CVE-2026-34447 [MEDIUM] CVE-2026-34447: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.
OSV
ONNX: External Data Symlink Traversal
osv·2026-04-01
CVE-2026-34447 [MEDIUM] ONNX: External Data Symlink Traversal
ONNX: External Data Symlink Traversal
Summary
- Issue: Symlink traversal in external data loading allows reading files outside the model directory.
- Affected code: `onnx/onnx/checker.cc: resolve_external_data_location` used via Python `onnx.external_data_helper.load_external_data_for_model`.
- Impact: Arbitrary file read (confidentiality breach) when a model’s external data path resolves to a symlink targeting a file outside the model directory.
Root Cause
- The function `resolve_external_data_location(base_dir, location, tensor_name)` intends to ensure that external data files reside within `base_dir`. It:
- Rejects empty/absolute paths
- Normalizes the relative path and rejects `..`
- Builds `data_path = base_dir / relative_path`
- Checks `exists(data_path)` and `is_regular_file(data_
GHSA
ONNX: External Data Symlink Traversal
ghsa·2026-04-01
CVE-2026-34447 [MEDIUM] CWE-22 ONNX: External Data Symlink Traversal
ONNX: External Data Symlink Traversal
Summary
- Issue: Symlink traversal in external data loading allows reading files outside the model directory.
- Affected code: `onnx/onnx/checker.cc: resolve_external_data_location` used via Python `onnx.external_data_helper.load_external_data_for_model`.
- Impact: Arbitrary file read (confidentiality breach) when a model’s external data path resolves to a symlink targeting a file outside the model directory.
Root Cause
- The function `resolve_external_data_location(base_dir, location, tensor_name)` intends to ensure that external data files reside within `base_dir`. It:
- Rejects empty/absolute paths
- Normalizes the relative path and rejects `..`
- Builds `data_path = base_dir / relative_path`
- Checks `exists(data_path)` and `is_regular_file(data_
Debian
CVE-2026-34447: onnx - Open Neural Network Exchange (ONNX) is an open standard for machine learning int...
vendor_debian·2026·CVSS 5.5
CVE-2026-34447 [MEDIUM] CVE-2026-34447: onnx - Open Neural Network Exchange (ONNX) is an open standard for machine learning int...
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
2026-04-01
Published