CVE-2026-34447
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Published Apr 1, 2026 · updated Jun 17, 2026 · linuxfoundation onnx
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 1, 2026 · NIST NVD
Detected
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.
Jun 17, 2026 · NIST NVD
Updated
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.
Affected
- cpe linuxfoundation/onnxversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-34447
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-34447
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.2
nvd.nist.gov