CVE-2026-34446CWE-22CWE-61
ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
Medium · published April 1, 2026
What it is
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is an issue in onnx.load, the code checks for symlinks to prevent path traversal, but completely misses hardlinks because a hardlink looks exactly like a regular file on the filesystem. This issue has been patched in version 1.21.0.
The record
Technical detail
- CVSS v3.1
- 4.7 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00171 · 6.1th percentile
- Weaknesses
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-61 · UNIX Symbolic Link (Symlink) Following
- Published
- 2026-04-01T17:37Z
EPSS history
Timeline