PrivacyMedium
CVE-2026-34447: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior…
- Occurred
- Apr 1, 2026
- Published
- Apr 1, 2026
- Source
- NVD CVE
Summary
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.
Tags
- CVE
- CVE-2026-34447
- cvss:MEDIUM
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Symlink traversal vulnerability allows unauthorized file access outside intended directory.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8