CVE Explorer

CVE-2026-34446

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is an issue in onnx.load, the code checks for symlinks to prevent path traversal, but completely misses hardlinks because a hardlink looks exactly like a regular file on the filesystem. This issue has been patched in version 1.21.0.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a82f04ae5be2d7a4b63edba95ab7f6cafb534cb1a6502a74fb196cda7f8fdf8d

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

cwe · 2 assertions

{"cweId":"CWE-61","description":"CWE-61: UNIX Symbolic Link (Symlink) Following","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:324b9f4afd2856a1098860313de13593221a63611f727514b272a62a199ce52d · sha256:f91a43937d5d38b6… · /containers/cna/problemTypes/1/descriptions/0

{"cweId":"CWE-22","description":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:324b9f4afd2856a1098860313de13593221a63611f727514b272a62a199ce52d · sha256:f91a43937d5d38b6… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

1 source assertion

{"product":"onnx","vendor":"onnx","versions":[{"status":"affected","version":"< 1.21.0"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:324b9f4afd2856a1098860313de13593221a63611f727514b272a62a199ce52d · sha256:f91a43937d5d38b6… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:324b9f4afd2856a1098860313de13593221a63611f727514b272a62a199ce52d · sha256:f91a43937d5d38b6… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

2 source assertions

{"cweId":"CWE-61","description":"CWE-61: UNIX Symbolic Link (Symlink) Following","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:324b9f4afd2856a1098860313de13593221a63611f727514b272a62a199ce52d · sha256:f91a43937d5d38b6… · /containers/cna/problemTypes/1/descriptions/0

{"cweId":"CWE-22","description":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:324b9f4afd2856a1098860313de13593221a63611f727514b272a62a199ce52d · sha256:f91a43937d5d38b6… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions

{"name":"https://github.com/onnx/onnx/commit/4755f8053928dce18a61db8fec71b69c74f786cb","tags":["x_refsource_MISC"],"url":"https://github.com/onnx/onnx/commit/4755f8053928dce18a61db8fec71b69c74f786cb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:324b9f4afd2856a1098860313de13593221a63611f727514b272a62a199ce52d · sha256:f91a43937d5d38b6… · /containers/cna/references/1

{"name":"https://github.com/onnx/onnx/security/advisories/GHSA-cmw6-hcpp-c6jp","tags":["x_refsource_CONFIRM"],"url":"https://github.com/onnx/onnx/security/advisories/GHSA-cmw6-hcpp-c6jp"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:324b9f4afd2856a1098860313de13593221a63611f727514b272a62a199ce52d · sha256:f91a43937d5d38b6… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer