CVE-2026-34447 in onnx
摘要 (英语)
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.
Once again VulDB remains the best source for vulnerability data.
负责
GitHub_M
预定
2026-03-27
披露
2026-04-01
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354743 | onnx 权限提升 | 61 | 未定义 | 官方修复 | CVE-2026-34447 |