Security1 hOctober 16, 2026, 01:17

CVE-2026-34445: ONNX before 1.21.0 allowed attribute injection via external_data

A flaw in ONNX before 1.21.0 (CVE-2026-34445) let a crafted .onnx file overwrite the loader's internal Python attributes through unexpected keys in the external_data field. Version 1.21.0 fixes it with an allowlist of recognized keys; the issue is rated CVSS 8.6 (denial of service).

DEV Community

Open source

ONNX < 1.21.0 called setattr for any external_data key without validation
Valid keys are location, offset, length, checksum and basepath
CVSS 8.6 HIGH, CWE-20/CWE-915, fixed in ONNX 1.21.0
Free keras-model-scan v0.13.0 flags the vector as OEK001

#ONNX

CVE-2026-92951: vm2 sandbox escape via external package allowlist bypass

Security

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Security

CVE-2026-34445: ONNX before 1.21.0 allowed attribute injection via external_data

CVE-2026-92951: vm2 sandbox escape via external package allowlist bypass

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Semicolon in a Codex branch name leaked GitHub token via command injection

Swiggy opens its services to external AI agents via MCP