3 matches found
SUSE CVE-2026-27489
Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0...
8.7CVSS5.9AI score0.00593EPSS
SaveExploits1References3
CVE-2026-27489
CVE-2026-27489: Open Neural Network Exchange (ONNX) prior to 1.21.0 suffers a path-traversal via symlink vulnerability that allows reading files outside the model or user directory. Affected product detail in IBM Watson Speech Services Cartridge (versions 4.0.0–5.3.1); fix is in 5.3.1 Patch 5 (5....
8.7CVSS5.9AI score0.00593EPSS
SaveExploits1References6Affected Software1
20