{"id":"CVE-2026-34445","title":"ONNX: ONNX: Denial of Service and potential information disclosure via malicious model metadata (CVE-2026-34445)","summary":"A flaw was found in Open Neural Network Exchange (ONNX). An attacker could exploit a vulnerability in how ONNX processes model metadata, specifically within the ExternalDataInfo class. By crafting a malicious ONNX model, an attacker could …","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","cvssSource":"vendor","cwe":"CWE-915","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","affected":["openshift_ai_rhoai","openshift_ai 2.25","openshift_ai 3.3"],"patched":["openshift_ai 2.25","openshift_ai 3.3"],"published":"2026-04-01","updated":"2026-09-30","sourceUpdated":"2026-09-30T16:55:43+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34445.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34445.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-34445"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2453930"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34445"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34445"},{"url":"https://github.com/onnx/onnx/commit/e30c6935d67cc3eca2fa284e37248e7c0036c46b"},{"url":"https://github.com/onnx/onnx/pull/7751"},{"url":"https://github.com/onnx/onnx/security/advisories/GHSA-538c-55jv-c5g9"},{"url":"https://access.redhat.com/errata/RHSA-2026:65126"},{"url":"https://access.redhat.com/errata/RHSA-2026:73987"},{"url":"https://github.com/onnx/onnx"}],"tags":["csaf","vex","red-hat","osv","pip"],"epss":0.00288,"epssPercentile":0.21175,"aliases":["GHSA-538c-55jv-c5g9","PYSEC-2026-2240"],"ecosystem":"pip","scores":{"vendor":7.3,"osv":8.6},"ingestedAt":"2026-07-13T18:57:52.931Z","slug":"CVE-2026-34445","body":"## Overview\n\nA flaw was found in Open Neural Network Exchange (ONNX). An attacker could exploit a vulnerability in how ONNX processes model metadata, specifically within the ExternalDataInfo class. By crafting a malicious ONNX model, an attacker could overwrite internal object properties, leading to a denial of service, which makes the system unavailable. This vulnerability could also result in limited information disclosure or data alteration.\n\n## Vendor advisories\n\n- **RHSA-2026:65126** · Red Hat · fixed in: Red Hat OpenShift AI 2.25 · released 2026-09-08 · [advisory](https://access.redhat.com/errata/RHSA-2026:65126)\n- **RHSA-2026:73987** · Red Hat · fixed in: Red Hat OpenShift AI 3.3 · released 2026-09-30 · [advisory](https://access.redhat.com/errata/RHSA-2026:73987)\n- **Red Hat VEX** · Moderate · affected: Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat OpenShift AI (RHOAI) · updated 2026-09-30 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34445.json)\n\n**ONNX: ONNX: Denial of Service and potential information disclosure via malicious model metadata** — rated Moderate by Red Hat. Released 2026-04-01, updated 2026-09-30.\n\nAffected:\n\n- Red Hat OpenShift AI (RHOAI)\n\nFixed:\n\n- Red Hat OpenShift AI 2.25\n- Red Hat OpenShift AI 3.3\n\nNo fix planned:\n\n- Red Hat OpenShift AI (RHOAI)\n\nNot affected:\n\n- Red Hat OpenShift AI 2.25\n- Red Hat OpenShift AI 3.3\n\n## Remediation\n\nFor Red Hat OpenShift AI 2.25.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/ https://access.redhat.com/errata/RHSA-2026:65126\nFor Red Hat OpenShift AI 3.3.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/ https://access.redhat.com/errata/RHSA-2026:73987\n\n## Package advisory (CVE-2026-34445)\n\nAffected packages:\n\n- `onnx < 1.21.0`\n\nPatched in:\n\n- `onnx 1.21.0`\n\nSource: https://osv.dev/vulnerability/GHSA-538c-55jv-c5g9","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":214192,"id":"CVE-2026-34445","ts":1790841345279,"field":"cvss","old":"8.6","new":"7.3"},{"seq":108698,"id":"CVE-2026-34445","ts":1789182830999,"field":"cvss","old":"7.3","new":"8.6"},{"seq":107825,"id":"CVE-2026-34445","ts":1789182652375,"field":"cvss","old":"8.6","new":"7.3"},{"seq":106688,"id":"CVE-2026-34445","ts":1789180886820,"field":"cvss","old":"7.3","new":"8.6"},{"seq":105551,"id":"CVE-2026-34445","ts":1789178945201,"field":"cvss","old":"8.6","new":"7.3"},{"seq":104414,"id":"CVE-2026-34445","ts":1789176348683,"field":"cvss","old":"7.3","new":"8.6"},{"seq":103277,"id":"CVE-2026-34445","ts":1789175217605,"field":"cvss","old":"8.6","new":"7.3"},{"seq":102140,"id":"CVE-2026-34445","ts":1789171772912,"field":"cvss","old":"7.3","new":"8.6"},{"seq":101018,"id":"CVE-2026-34445","ts":1789171468454,"field":"cvss","old":"8.6","new":"7.3"},{"seq":99898,"id":"CVE-2026-34445","ts":1789167402240,"field":"cvss","old":"7.3","new":"8.6"},{"seq":98781,"id":"CVE-2026-34445","ts":1789164025023,"field":"cvss","old":"8.6","new":"7.3"},{"seq":97800,"id":"CVE-2026-34445","ts":1789163098525,"field":"cvss","old":"7.3","new":"8.6"},{"seq":96803,"id":"CVE-2026-34445","ts":1789160220617,"field":"cvss","old":"8.6","new":"7.3"},{"seq":95804,"id":"CVE-2026-34445","ts":1789158701793,"field":"cvss","old":"7.3","new":"8.6"},{"seq":94798,"id":"CVE-2026-34445","ts":1789156491523,"field":"cvss","old":"8.6","new":"7.3"},{"seq":93790,"id":"CVE-2026-34445","ts":1789154360155,"field":"cvss","old":"7.3","new":"8.6"},{"seq":92776,"id":"CVE-2026-34445","ts":1789152706265,"field":"cvss","old":"8.6","new":"7.3"},{"seq":91841,"id":"CVE-2026-34445","ts":1789150173758,"field":"cvss","old":"7.3","new":"8.6"},{"seq":90906,"id":"CVE-2026-34445","ts":1789148935038,"field":"cvss","old":"8.6","new":"7.3"},{"seq":89827,"id":"CVE-2026-34445","ts":1789145725743,"field":"cvss","old":"7.3","new":"8.6"},{"seq":88776,"id":"CVE-2026-34445","ts":1789145180173,"field":"cvss","old":"8.6","new":"7.3"},{"seq":87732,"id":"CVE-2026-34445","ts":1789141361940,"field":"cvss","old":"7.3","new":"8.6"},{"seq":86660,"id":"CVE-2026-34445","ts":1789137731827,"field":"cvss","old":"8.6","new":"7.3"},{"seq":85598,"id":"CVE-2026-34445","ts":1789137015559,"field":"cvss","old":"7.3","new":"8.6"},{"seq":84516,"id":"CVE-2026-34445","ts":1789133904364,"field":"cvss","old":"8.6","new":"7.3"},{"seq":83455,"id":"CVE-2026-34445","ts":1789132671293,"field":"cvss","old":"7.3","new":"8.6"},{"seq":82383,"id":"CVE-2026-34445","ts":1789130139914,"field":"cvss","old":"8.6","new":"7.3"},{"seq":81324,"id":"CVE-2026-34445","ts":1789128312326,"field":"cvss","old":"7.3","new":"8.6"},{"seq":80273,"id":"CVE-2026-34445","ts":1789126402139,"field":"cvss","old":"8.6","new":"7.3"},{"seq":79264,"id":"CVE-2026-34445","ts":1789123989850,"field":"cvss","old":"7.3","new":"8.6"},{"seq":78247,"id":"CVE-2026-34445","ts":1789122598380,"field":"cvss","old":"8.6","new":"7.3"},{"seq":77189,"id":"CVE-2026-34445","ts":1789119555986,"field":"cvss","old":"7.3","new":"8.6"},{"seq":76169,"id":"CVE-2026-34445","ts":1789118623967,"field":"cvss","old":"8.6","new":"7.3"},{"seq":75125,"id":"CVE-2026-34445","ts":1789115069683,"field":"cvss","old":"7.3","new":"8.6"},{"seq":74069,"id":"CVE-2026-34445","ts":1789111357321,"field":"cvss","old":"8.6","new":"7.3"},{"seq":73017,"id":"CVE-2026-34445","ts":1789110280671,"field":"cvss","old":"7.3","new":"8.6"},{"seq":71959,"id":"CVE-2026-34445","ts":1789107423746,"field":"cvss","old":"8.6","new":"7.3"},{"seq":70901,"id":"CVE-2026-34445","ts":1789105840453,"field":"cvss","old":"7.3","new":"8.6"},{"seq":69843,"id":"CVE-2026-34445","ts":1789103565183,"field":"cvss","old":"8.6","new":"7.3"},{"seq":68785,"id":"CVE-2026-34445","ts":1789101512537,"field":"cvss","old":"7.3","new":"8.6"},{"seq":67726,"id":"CVE-2026-34445","ts":1789099700376,"field":"cvss","old":"8.6","new":"7.3"},{"seq":66689,"id":"CVE-2026-34445","ts":1789097115749,"field":"cvss","old":"7.3","new":"8.6"},{"seq":65650,"id":"CVE-2026-34445","ts":1789095787788,"field":"cvss","old":"8.6","new":"7.3"},{"seq":64625,"id":"CVE-2026-34445","ts":1789092763455,"field":"cvss","old":"7.3","new":"8.6"},{"seq":63600,"id":"CVE-2026-34445","ts":1789089109285,"field":"cvss","old":"8.6","new":"7.3"},{"seq":62575,"id":"CVE-2026-34445","ts":1789088369492,"field":"cvss","old":"7.3","new":"8.6"},{"seq":61550,"id":"CVE-2026-34445","ts":1789084719048,"field":"cvss","old":"8.6","new":"7.3"},{"seq":60525,"id":"CVE-2026-34445","ts":1789084035883,"field":"cvss","old":"7.3","new":"8.6"},{"seq":59500,"id":"CVE-2026-34445","ts":1789080856963,"field":"cvss","old":"8.6","new":"7.3"},{"seq":58475,"id":"CVE-2026-34445","ts":1789079698504,"field":"cvss","old":"7.3","new":"8.6"}]}