CVE-2026-34446

CVE-2026-34446 identifies a path traversal vulnerability in Open Neural Network Exchange (ONNX) versions prior to 1.21.0, specifically within the `onnx.load` function, which incorrectly handles hardlinks and could allow access to arbitrary files. Rated as Medium severity with a CVSS score of 4.7, exploitation requires local access and user interaction, but could result in high confidentiality impact through sensitive file disclosure. Currently, there is no evidence of active exploitation, public exploit code, or significant community attention, with its EPSS score indicating a very low probability of exploitation.