CVE-2026-34447: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows re...

Added to the CISA Known Exploited Vulnerabilities catalog on 01 Apr 2026. Vendor: AI/ML. Product: machine learning. CVSS score: 5.5.

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.

Required action: Review and patch if applicable to your AI infrastructure.