CVE catalog

CVE-2026-28500

Severity: High · CVSS 8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Published: Mar 18, 2026, 1:15:07 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.32% · Oct 25, 2026

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load() due to improper logic in the repository trust verification mechanism. While the function is designed to warn users when loading models from non-official sources, the use of the silent=True parameter completely suppresses all security warnings and confirmation prompts. This vulnerability transforms a standard model-loading function into a vector for Zero-Interaction Supply-Chain Attacks. When chained with file-system vulnerabilities, an attacker can silently exfiltrate sensitive files (SSH keys, cloud credentials) from the victim's machine the moment the model is loaded. As of time of publication, no known patched versions are available.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	onnx	sid	`1.20.0-6`	vulnerable
Debian	onnx	forky	`1.20.0-6`	vulnerable
Debian	onnx	trixie	`1.17.0-3`	vulnerable
Debian	onnx	bookworm	`1.12.0-2`	vulnerable
Pip	onnx	Not reported	Not reported	unknown
Cpe	onnx	Not reported	Not reported	vulnerable
Cpe	onnx	Not reported	Not reported	unknown

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	onnx	source	sid	`(unfixed)`	not yet assigned	Not reported	[1131209]
Debian	onnx	source	forky	`(unfixed)`	not yet assigned	Not reported	[1131209]
Debian	onnx	source	trixie	`(unfixed)`	not yet assigned	Not reported	[1131209]
Debian	onnx	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1131209]

[Debian bug #1131209]

Notes

[trixie] onnx: Minor issue [bookworm] onnx: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libonnx1]Affected
Source package: [onnx]
Details (2)
- 1.12.0-2+b4 · amd64 · bookworm
  Affected
  nvd · onnx · debian · bookworm; nvd · onnx · debian · 12
- 1.12.0-2+b4 · arm64 · bookworm
  Affected
  nvd · onnx · debian · bookworm; nvd · onnx · debian · 12
[libonnx-dev]Affected
Source package: [onnx]
Details (2)
- 1.12.0-2+b4 · amd64 · bookworm
  Affected
  nvd · onnx · debian · bookworm; nvd · onnx · debian · 12
- 1.12.0-2+b4 · arm64 · bookworm
  Affected
  nvd · onnx · debian · bookworm; nvd · onnx · debian · 12
[libonnxifi]Affected
Source package: [onnx]
Details (2)
- 1.12.0-2+b4 · amd64 · bookworm
  Affected
  nvd · onnx · debian · bookworm; nvd · onnx · debian · 12
- 1.12.0-2+b4 · arm64 · bookworm
  Affected
  nvd · onnx · debian · bookworm; nvd · onnx · debian · 12
[libonnx-testdata]Affected
Source package: [onnx]
Details (2)
- 1.12.0-2 · all · bookworm
  Affected
  nvd · onnx · debian · bookworm; nvd · onnx · debian · 12
- 1.12.0-2 · all · bookworm
  Affected
  nvd · onnx · debian · bookworm; nvd · onnx · debian · 12
[python3-onnx]Affected
Source package: [onnx]
Details (2)
- 1.12.0-2+b4 · amd64 · bookworm
  Affected
  nvd · onnx · debian · bookworm; nvd · onnx · debian · 12
- 1.12.0-2+b4 · arm64 · bookworm
  Affected
  nvd · onnx · debian · bookworm; nvd · onnx · debian · 12

[Debian 13 (Trixie)]

[libonnx1t64]Affected
Source package: [onnx]
Details (2)
- 1.17.0-3+b1 · amd64 · trixie
  Affected
  nvd · onnx · debian · 13
- 1.17.0-3+b1 · arm64 · trixie
  Affected
  nvd · onnx · debian · 13
[libonnx-dev]Affected
Source package: [onnx]
Details (2)
- 1.17.0-3+b1 · amd64 · trixie
  Affected
  nvd · onnx · debian · 13
- 1.17.0-3+b1 · arm64 · trixie
  Affected
  nvd · onnx · debian · 13
[libonnx-testdata]Affected
Source package: [onnx]
Details (2)
- 1.17.0-3 · all · trixie
  Affected
  nvd · onnx · debian · 13
- 1.17.0-3 · all · trixie
  Affected
  nvd · onnx · debian · 13
[python3-onnx]Affected
Source package: [onnx]
Details (2)
- 1.17.0-3+b1 · amd64 · trixie
  Affected
  nvd · onnx · debian · 13
- 1.17.0-3+b1 · arm64 · trixie
  Affected
  nvd · onnx · debian · 13

Observed: Oct 23, 2026, 10:41:27 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [GitHub Advisory Database] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]