8.7
Élevée
CVE-2026-27489 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
Description
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| onnx 1.21 | premières → < 1.21.0 | 1.21.0 |
| Red Hat OpenShift AI 2.25 1780069222 | premières → < 1780069222 | 1780069222 |
| Red Hat OpenShift AI (RHOAI) | Versions non publiées |
Références
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de onnx
Les 14 CVE de onnx →
CVE-2026-115922
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Moyenne
CVE-2026-115921
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Moyenne
CVE-2026-115920
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Moyenne
CVE-2026-115919
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Moyenne