CVE-2026-28500 is a critical security control bypass affecting Open Neural Network Exchange (ONNX) versions up to 1.20.1, specifically within the `linuxfoundation onnx` product. This vulnerability arises from the `onnx.hub.load()` function's `silent=True` parameter, which improperly suppresses all security warnings and repository trust verification, enabling Zero-Interaction Supply-Chain Attacks. With a CVSS score of 9.1 (CRITICAL), it allows unauthenticated attackers to silently exfiltrate sensitive files like SSH keys or cloud credentials from a victim's machine upon model loading, particularly when chained with file-system vulnerabilities. Although no public exploit code or CISA KEV entry is available, the vulnerability is on the "Hot List" and has generated community discussion, with no known patch released yet.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.20.1CPE matchmatch criteria | cpe:2.3:a:linuxfoundation:onnx:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.