PT-2026-29579 · Onnx · Onnx

Zeroxjacks · Published 2026-04-01 · Updated 2026-04-09 · CVE-2026-34446

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ONNX versions prior to 1.21.0

Description The Open Neural Network Exchange (ONNX) has an issue in the onnx.load function where the code checks for symbolic links to prevent path traversal but fails to account for hard links, as hard links appear as regular files on the filesystem. The validator in onnx/checker.cc only uses is symlink() and does not check the inode or st nlink, allowing hard links to bypass security checks. This could be particularly dangerous in AI supply chain scenarios.

Recommendations Update to version 1.21.0 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

CWE-61

Related Identifiers

CVE-2026-34446

ECHO-76FB-F78F-1FBE

GHSA-CMW6-HCPP-C6JP

Affected Products

Onnx

References · 14

• https://github.com/onnx/onnx/security/advisories/GHSA-cmw6-hcpp-c6jp · Vendor Advisory
• https://github.com/onnx/onnx/commit/4755f8053928dce18a61db8fec71b69c74f786cb · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-34446 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-34446 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34446 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cmw6-hcpp-c6jp · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-34446 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-34446 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-34446 · Security Note
• https://github.com/onnx/onnx · Note
• https://twitter.com/infoflowcloud/status/2039746831551185243 · Twitter Post
• https://twitter.com/CVEnew/status/2039744380966158835 · Twitter Post
• https://twitter.com/cyberbivash/status/2039438556440007088 · Twitter Post
• https://t.me/msrcreports/3760 · Telegram Post