CVE-2026-34445
High · 8.6CVSS
8.6
EPSS
0.5%
Published
Apr 1, 2026
CISA due date
—
The record
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setattr() function to load metadata (like file paths or data lengths) directly from an ONNX model file. It didn’t check if the "keys" in the file were valid. Due to this, an attacker could craft a malicious model that overwrites internal object properties. This issue has been patched in version 1.21.0.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | py3.10-onnx | 0 | 1.21.0-r0 |
| Chainguard | py3.11-onnx | 0 | 1.21.0-r0 |
| Chainguard | py3.12-onnx | 0 | 1.21.0-r0 |
| Chainguard | py3.13-onnx | 0 | 1.21.0-r0 |
| Wolfi | py3.10-onnx | 0 | 1.21.0-r0 |
| Wolfi | py3.11-onnx | 0 | 1.21.0-r0 |
| Wolfi | py3.12-onnx | 0 | 1.21.0-r0 |
| Wolfi | py3.13-onnx | 0 | 1.21.0-r0 |
Related vulnerabilities
- CVE-2026-34446 Open Neural Network Exchange (ONNX) is an open standard for machine learning… Also affects py3.10-onnx
- CVE-2026-34447 Open Neural Network Exchange (ONNX) is an open standard for machine learning… Also affects py3.10-onnx
- CVE-2026-28500 Open Neural Network Exchange (ONNX) is an open standard for machine learning… Also affects py3.10-onnx
- CVE-2026-113786 pypdf is a free and open-source pure-python PDF library. CWE-20
- CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. CWE-20
- CVE-2026-111869 A vulnerability was identified in makeplane plane up to 1.4.2. CWE-20
- CVE-2026-100347 kin-openapi is a Go project for handling OpenAPI files. CWE-20
- CVE-2026-99999 In the Linux kernel, the following vulnerability has been resolved: ipv4: validate… CWE-20