PrivacyHigh
CVE-2026-27489: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior…
- Occurred
- Apr 1, 2026
- Published
- Apr 1, 2026
- Source
- NVD CVE
Summary
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.
Tags
- CVE
- CVE-2026-27489
- cvss:HIGH
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Path traversal vulnerability allows reading arbitrary files, constituting unauthorized data access.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8