onnx onnx-mlir up to 0.5.0.0 Placeholder Node Cache backend.py generate_hash_key weak hash

Summaryinfo

A vulnerability was found in onnx onnx-mlir up to 0.5.0.0. It has been rated as problematic. This affects the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py of the component Placeholder Node Cache Handler. Performing a manipulation results in weak hash. This vulnerability is known as CVE-2026-11329. Attacking locally is a requirement. No exploit is available. It is suggested to install a patch to address this issue.

Detailsinfo

A vulnerability classified as problematic has been found in onnx onnx-mlir up to 0.5.0.0. This affects the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py of the component Placeholder Node Cache Handler. The manipulation with an unknown input leads to a weak hash vulnerability. CWE is classifying the issue as CWE-328. The product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack). This is going to have an impact on integrity, and availability.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-11329. The exploitability is told to be difficult. An attack has to be approached locally. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1600.001 for this issue.

Applying the patch 72c5187ff6d13c2c2b3d3789b8f5faf99f08a5b4 is able to eliminate this problem. The bugfix is ready for download at github.com.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• onnx

Name

• onnx-mlir

Version

• 0.5.0

License

• open-source

Website

• Product: https://github.com/onnx/onnx-mlir/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #832358: onnx onnx-mlir v0.5.0.0 cache key collision (by Dem00)

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion