Fluid Attacks Database

Description

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
pypi	onnx	>=0 <1.21.0	1.21.0
debian 12	onnx	=1.12.0-2 \|\| =1.13.1-1 \|\| =1.13.1-2 \|\| =1.13.1-3 \|\| =1.14.1-1 \|\| =1.14.1-2 \|\| =1.14.1-2.1 \|\| =1.14.1-2.1~exp1 \|\| =1.16.1-1 \|\| =1.16.2-1 \|\| =1.17.0-1 \|\| =1.17.0-2 \|\| =1.17.0-3 \|\| =1.19.1-1~exp1 \|\| =1.20.0-1 \|\| =1.20.0-1~exp1 \|\| =1.20.0-3 \|\| =1.20.0-4 \|\| =1.20.0-5 \|\| =1.20.0-6 \|\| =1.21.0-1	-
debian 13	onnx	=1.17.0-3 \|\| =1.19.1-1~exp1 \|\| =1.20.0-1 \|\| =1.20.0-1~exp1 \|\| =1.20.0-3 \|\| =1.20.0-4 \|\| =1.20.0-5 \|\| =1.20.0-6 \|\| =1.21.0-1	-
debian 14	onnx	=1.17.0-3 \|\| =1.19.1-1~exp1 \|\| =1.20.0-1 \|\| =1.20.0-1~exp1 \|\| =1.20.0-3 \|\| =1.20.0-4 \|\| =1.20.0-5 \|\| =1.20.0-6 \|\| =1.21.0-1	-

Aliases

1. CVE-2026-274892. NVD-2026-274893. OSV-2026-274894. OSV-DEBIAN-2026-274895. GHSA-3r9x-f23j-gc736. GCVE-2026-274897. SECURITY-TRACKER-CVE-2026-27489

References

1. https://github.com/onnx/onnx/security/advisories/GHSA-3r9x-f23j-gc732. https://github.com/onnx/onnx/commit/4755f8053928dce18a61db8fec71b69c74f786cb

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.