PatchTheCVECVE-2026-28500: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
CVE-2026-28500 is a high-severity flaw (CVSS 8.6) affecting onnx. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load() due to improper logic in the repository trust verification mechanism. While the function is designed to warn users when loading models from non-official sources, the use of the silent=True parameter completely suppresses all security warnings and confirmation pro
Why this priority
- High severity
- Remotely exploitable, no login, no user action
- On your watchlist
A fixed release or distro patch exists.
Last updated 2026-07-15 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-28500?
onnx: upgrade to newer than 1.20.1. Exact commands for each OS are on this page.
Is CVE-2026-28500 being exploited?
CVE-2026-28500 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-28500 affect?
CVE-2026-28500 affects onnx. Severity is high (CVSS 8.6). Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load() due to improper logic in the repository trust verific
How urgent is CVE-2026-28500?
Priority 46/100. High severity; Remotely exploitable, no login, no user action; On your watchlist
Related CVEs
- CVE-2026-49114 HIGH 7.1 UPGRADE In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's e
- CVE-2026-27489 HIGH 7.5 UPGRADE Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
- CVE-2026-44512 MEDIUM 5.5 UPGRADE Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
- CVE-2026-34447 MEDIUM 5.5 UPGRADE Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
- CVE-2026-34446 MEDIUM 4.7 UPGRADE Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability