Symlink Traversal Vulnerability in Open Neural Network Exchange (ONNX)

CVE-2026-34447

What is CVE-2026-34447?

The Open Neural Network Exchange (ONNX) framework, utilized for enhancing machine learning model interoperability, contains a symlink traversal vulnerability prior to version 1.21.0. This security flaw allows attackers to exploit the external data loading functionality, enabling them to read files beyond the designated model directory. The vulnerability has been effectively addressed in version 1.21.0, underscoring the importance of updating to the latest version to maintain security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References