https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:49:50 +0000 https://cve.radiocsirt.org/vuln/cve-2026-28500 <p><strong>Affected:</strong> onnx, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI (RHOAI)</p> <p>Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load() due to improper logic in the repository trust verification mechanism. While the function is designed to warn users when loading models from non-official sources, the use of the silent=True parameter completely suppresses all security warnings and confirmation prompts. This vulnerability transforms a standard model-loading function into a vector for Zero-Interaction Supply-Chain Attacks. When chained with file-system vulnerabilities, an attacker can silently exfiltrate sensitive files (SSH keys, cloud credentials) from the victim&#39;s machine the moment the model is loaded. As of time of publication, no known patched versions are available.</p> <p><strong>Affected:</strong> onnx, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI (RHOAI)</p> <p>Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load() due to improper logic in the repository trust verification mechanism. While the function is designed to warn users when loading models from non-official sources, the use of the silent=True parameter completely suppresses all security warnings and confirmation prompts. This vulnerability transforms a standard model-loading function into a vector for Zero-Interaction Supply-Chain Attacks. When chained with file-system vulnerabilities, an attacker can silently exfiltrate sensitive files (SSH keys, cloud credentials) from the victim&#39;s machine the moment the model is loaded. As of time of publication, no known patched versions are available.</p> https://cve.radiocsirt.org/vuln/cve-2026-28500 https://cve.radiocsirt.org/vuln/ghsa-hqmj-h5c6-369m <p><strong>Affected:</strong> PyPI: onnx</p> <p>## What&#39;s the issue Passing `silent=True` to `onnx.hub.load()` kills all trust warnings and user prompts. This means a model can be downloaded from any unverified GitHub repo with zero user awareness. ```python if not _verify_repo_ref(repo) and not silent: # completely skipped when silent=True print(&#34;The model repo... is not trusted&#34;) if input().lower() != &#34;y&#34;: return None ``` On top of that, the SHA256 integrity check is useless here — it validates against a manifest that lives in the same repo the attacker controls, so the hash will always match.</p> <p>## Impact Any pipeline using `hub.load()` with `silent=True` and an external repo string is silently loading whatever the repo owner ships. If that model executes arbitrary code on load, the attacker has access to the machine. ## Resolved by removing the feature ## References - [Write-up](https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-28500.md)</p> <p><strong>Affected:</strong> PyPI: onnx</p> <p>## What&#39;s the issue Passing `silent=True` to `onnx.hub.load()` kills all trust warnings and user prompts. This means a model can be downloaded from any unverified GitHub repo with zero user awareness. ```python if not _verify_repo_ref(repo) and not silent: # completely skipped when silent=True print(&#34;The model repo... is not trusted&#34;) if input().lower() != &#34;y&#34;: return None ``` On top of that, the SHA256 integrity check is useless here — it validates against a manifest that lives in the same repo the attacker controls, so the hash will always match.</p> <p>## Impact Any pipeline using `hub.load()` with `silent=True` and an external repo string is silently loading whatever the repo owner ships. If that model executes arbitrary code on load, the attacker has access to the machine. ## Resolved by removing the feature ## References - [Write-up](https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-28500.md)</p> https://cve.radiocsirt.org/vuln/ghsa-hqmj-h5c6-369m