CVE-2026-11329

🗓️ 05 Jun 2026 12:15:11Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 39 Views🌐 WEB

Vulnerability in onnx-mlir Placeholder Node Cache generate_hash_key yields weak hash; local attack. Patch 72c5187f.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2026-11329	5 Jun 202612:15	–	attackerkb
CNNVD	ONNX-MLIR 安全漏洞	5 Jun 202600:00	–	cnnvd
Cvelist	CVE-2026-11329 onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash	5 Jun 202612:15	–	cvelist
EUVD	EUVD-2026-34826	5 Jun 202612:15	–	euvd
NVD	CVE-2026-11329	5 Jun 202613:16	–	nvd
OSV	CVE-2026-11329 onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash	5 Jun 202612:15	–	osv
OSV	UBUNTU-CVE-2026-11329	8 Jun 202600:00	–	osv
Positive Technologies	PT-2026-46946	5 Jun 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-11329	6 Jun 202612:43	–	redhatcve
UbuntuCve	CVE-2026-11329	5 Jun 202613:16	–	ubuntucve

Vulners

Node

onnx onnx-mlirMatch0.5.0

[
  {
    "vendor": "onnx",
    "product": "onnx-mlir",
    "versions": [
      {
        "version": "0.5.0",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:a:onnx:onnx-mlir:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "Placeholder Node Cache Handler"
    ]
  }
]

Source	Link
github	www.github.com/onnx/onnx-mlir/
github	www.github.com/onnx/onnx-mlir/pull/3427
vuldb	www.vuldb.com/submit/832358
vuldb	www.vuldb.com/vuln/368865
vuldb	www.vuldb.com/vuln/368865/cti
vuldb	www.vuldb.com/cve/CVE-2026-11329
github	www.github.com/onnx/onnx-mlir/commit/72c5187ff6d13c2c2b3d3789b8f5faf99f08a5b4

Parameter	Position	Path	Description	CWE
generate_hash_key	path	src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py	Weak hash due to generate_hash_key in Placeholder Node Cache Handler enabling local attack; patch recommended to resolve CWE-328 and CWE-327 issues.	CWE-328, CWE-327

17 Jun 2026 10:13Current

4.6Medium risk

Vulners AI Score4.6

CVSS 42

CVSS 22.4

CVSS 3.13.6

CVSS 33.6

EPSS0.00078

SSVC