Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-34445

31
FAUCET Score

CVE-2026-34445 is a high-severity vulnerability affecting the Open Neural Network Exchange (ONNX) framework prior to version 1.21.0. It allows an unauthenticated attacker to craft a malicious ONNX model that overwrites internal object properties due to improper validation of metadata loaded via Python's setattr() function. With a CVSS score of 8.6, this vulnerability has a network attack vector and low attack complexity, requiring no user interaction or privileges, potentially leading to high availability impact. While the CVE is listed as "Active" on the Hot List and has some community discussion, there is currently no public exploit code available on platforms like Metasploit, Nuclei, or ExploitDB.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.21.0CPE matchmatch criteria
cpe:2.3:a:linuxfoundation:onnx:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.6HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
4.7
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.29%
Probability of exploitation in next 30 days
EPSS Percentile
20.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0029 is in the 5th percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

microsoftpatch availablevia msrc
Product: azl3 pytorch 2.2.2-12 on Azure Linux 3.0Fixed in: 2.2.2-14
microsoftpatch availablevia msrc
Product: 20972-17084Fixed in: 2.2.2-14
pippatch availablevia ghsa
Product: onnxFixed in: 1.21.0

Vendor Advisories (2)

microsoft2026-Apr/CVE-2026-34445Important

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

Apr 2, 2026
pipGHSA-538c-55jv-c5g9high

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

Apr 1, 2026

References

github.com / onnx/onnx/commit/e30c6935d67cc3eca2fa284e37248e7c0036c46b
Patch
github.com / onnx/onnx/pull/7751
Issue TrackingPatch
github.com / onnx/onnx/security/advisories/GHSA-538c-55jv-c5g9
PatchVendor Advisory