PT-2026-29422 · Onnx · Onnx

Pi3Ch · Published 2026-03-31 · Updated 2026-04-02 · CVE-2026-27489

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions ONNX versions prior to 1.21.0

Description ONNX contains a path traversal vulnerability via symlink that allows reading arbitrary files outside the model or user-provided directory. The vulnerability exists because the check for symlinks is ineffective, allowing a symlink to point to an arbitrary location on the file system. An attacker could provide a victim with a compressed file containing a malicious ONNX model and a symlink, which, when uncompressed and loaded, could allow the attacker to read sensitive files and environment variables from the host system. This issue is not limited to UNIX systems.

Recommendations Update to ONNX version 1.21.0 or later.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-61

CWE-23

Related Identifiers

CVE-2026-27489

GHSA-3R9X-F23J-GC73

Affected Products

Onnx

References · 13

• https://github.com/onnx/onnx/commit/4755f8053928dce18a61db8fec71b69c74f786cb · Patch
• https://github.com/onnx/onnx/security/advisories/GHSA-3r9x-f23j-gc73 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-27489 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-27489 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-27489 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-27489 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3r9x-f23j-gc73 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27489 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-27489 · Vendor Advisory
• https://github.com/onnx/onnx · Note
• https://twitter.com/CVEnew/status/2039744382035718534 · Twitter Post
• https://twitter.com/secdim/status/2039188949093278197 · Twitter Post
• https://twitter.com/infoflowcloud/status/2039746883292205338 · Twitter Post