← CVE Intelligence

CVE-2026-34447

ONNX: External Data Symlink Traversal PUBLISHED

Description (CNA)

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.

Affected (CNA)

Vendor / productVersions
onnx / onnxaffected < 1.21.0

CWE

CWE-61, CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.