CVE-2026-27489: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files out...

Added to the CISA Known Exploited Vulnerabilities catalog on 01 Apr 2026. Vendor: AI/ML. Product: machine learning. CVSS score: 7.5.

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.

Required action: Review and patch if applicable to your AI infrastructure.