Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setattr() function to load metadata (like file paths or data lengths) directly from an ONNX model file. It didn’t check if the "keys" in the file were valid. Due to this, an attacker could craft a malicious model that overwrites internal object properties. This issue has been patched in version 1.21.0.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to
    version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setattr() function to load metadata
    (like file paths or data lengths) directly from an ONNX model file. It didn’t check if the "keys" in the
    file were valid. Due to this, an attacker could craft a malicious model that overwrites internal object
    properties. This issue has been patched in version 1.21.0. (CVE-2026-34445)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to     version 1.21.0, the ExternalDataInfo class in ONNX was using Python's setattr() function to load metadata     (like file paths or data lengths) directly from an ONNX model file. It didn't check if the keys in the     file were valid. Due to this, an attacker could craft a malicious model that overwrites internal object     properties. This issue has been patched in version 1.21.0. (CVE-2026-34445)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
457681	Echo: onnx: security update to 1.17.0-3+e1	Tenable Cloud Security	Echo Local Security Checks	Local	high
457681	Echo: onnx: security update to 1.17.0-3+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
304720	Linux Distros Unpatched Vulnerability : CVE-2026-34445	Nessus	Misc.	Local	high
439673	SCA: security update for onnx (GHSA-538c-55jv-c5g9)	Tenable Cloud Security	SCA Checks	Local	high
439673	SCA: security update for onnx (GHSA-538c-55jv-c5g9)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-34445

high

Tenable Plugins

high

high

high

high

high