CVE-2026-34447— ONNX: External Data Symlink Traversal
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-34447
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ONNX: External Data Symlink Traversal
Source: NVD (National Vulnerability Database)
Vulnerability Description
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-61
Source: NVD (National Vulnerability Database)
Vulnerability Title
Open Neural Network Exchange 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Open Neural Network Exchange是Open Neural Network Exchange开源的一个开放的生态系统，它使 AI 开发人员能够随着项目的发展选择合适的工具。 Open Neural Network Exchange 1.21.0之前版本存在安全漏洞，该漏洞源于外部数据加载中存在符号链接遍历，可能读取模型目录外的文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-34447
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-34447
请登录查看更多情报信息。
- External Data Symlink Traversal · Advisory · onnx/onnx · GitHubx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2026-34447
Same Patch Batch · onnx · 2026-04-01 · 4 CVEs total
| CVE-2026-34445 | 8.6 HIGH | ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings. |
| CVE-2026-34446 | 4.7 MEDIUM | ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load |
| CVE-2026-27489 | ONNX: Path Traversal via Symlink |
IV. Related Vulnerabilities
Same product: onnx
- CVE-2026-34446
ONNX: Arbitrary File Read via ExternalData Hardlink Bypass i - CVE-2026-27489
ONNX: Path Traversal via Symlink - CVE-2026-34445
ONNX: Malicious ONNX models can crash servers by exploiting - CVE-2026-28500
ONNX Untrusted Model Repository Warnings Suppressed by silen - CVE-2024-27319
Open Neural Network Exchange 缓冲区错误漏洞
Same vendor: onnx
- CVE-2026-34446
ONNX: Arbitrary File Read via ExternalData Hardlink Bypass i - CVE-2026-27489
ONNX: Path Traversal via Symlink - CVE-2026-34445
ONNX: Malicious ONNX models can crash servers by exploiting - CVE-2026-28500
ONNX Untrusted Model Repository Warnings Suppressed by silen - CVE-2024-7776
Arbitrary File Overwrite in onnx/onnx
Same weakness: CWE-61
- CVE-2026-29203
cPanel 安全漏洞 - CVE-2026-42275
zrok: WebDAV drive backend follows symlinks outside DriveRoo - CVE-2026-31893
Tunnelblick arbitrary file read via symlink following in tun - CVE-2026-7832
IObit Advanced SystemCare Service ASC.exe symlink - CVE-2026-43570
OpenClaw 2026.3.22 < 2026.4.5 - Symlink Traversal in Remote
V. Comments for CVE-2026-34447
No comments yet