DEBIAN-CVE-2026-28500
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load() due to improper logic in the repository trust verification mechanism. While the function is designed to warn users when loading models from non-official sources, the use of the silent=True parameter completely suppresses all security warnings and confirmation prompts. This vulnerability transforms a standard model-loading function into a vector for Zero-Interaction Supply-Chain Attacks. When chained with file-system vulnerabilities, an attacker can silently exfiltrate sensitive files (SSH keys, cloud credentials) from the victim's machine the moment the model is loaded. As of time of publication, no known patched versions are available.
DEBIAN-CVE-2026-28500
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:DEBIAN-CVE-2026-28500
onnx
Source reference: /affected/0/package/name
- Affected versions
- 1.12.0-2
Source reference:
/affected/0/versions1.13.1-1Source reference:
/affected/0/versions1.13.1-2Source reference:
/affected/0/versions1.13.1-3Source reference:
/affected/0/versions1.14.1-1Source reference:
/affected/0/versions1.14.1-2Source reference:
/affected/0/versions1.14.1-2.1Source reference:
/affected/0/versions1.14.1-2.1~exp1Source reference:
/affected/0/versions1.16.1-1Source reference:
/affected/0/versions1.16.2-1Source reference:
/affected/0/versions1.17.0-1Source reference:
/affected/0/versions1.17.0-2Source reference:
/affected/0/versions1.17.0-3Source reference:
/affected/0/versions1.19.1-1~exp1Source reference:
/affected/0/versions1.20.0-1Source reference:
/affected/0/versions1.20.0-1~exp1Source reference:
/affected/0/versions1.20.0-3Source reference:
/affected/0/versions1.20.0-4Source reference:
/affected/0/versions1.20.0-5Source reference:
/affected/0/versions1.20.0-6Source reference:
/affected/0/versions1.21.0-1Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
onnx
Source reference: /affected/1/package/name
- Affected versions
- 1.17.0-3
Source reference:
/affected/1/versions1.19.1-1~exp1Source reference:
/affected/1/versions1.20.0-1Source reference:
/affected/1/versions1.20.0-1~exp1Source reference:
/affected/1/versions1.20.0-3Source reference:
/affected/1/versions1.20.0-4Source reference:
/affected/1/versions1.20.0-5Source reference:
/affected/1/versions1.20.0-6Source reference:
/affected/1/versions1.21.0-1Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
onnx
Source reference: /affected/2/package/name
- Affected versions
- 1.17.0-3
Source reference:
/affected/2/versions1.19.1-1~exp1Source reference:
/affected/2/versions1.20.0-1Source reference:
/affected/2/versions1.20.0-1~exp1Source reference:
/affected/2/versions1.20.0-3Source reference:
/affected/2/versions1.20.0-4Source reference:
/affected/2/versions1.20.0-5Source reference:
/affected/2/versions1.20.0-6Source reference:
/affected/2/versions1.21.0-1Source reference:
/affected/2/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "onnx",
"purl": "pkg:deb/debian/onnx?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"1.12.0-2",
"1.13.1-1",
"1.13.1-2",
"1.13.1-3",
"1.14.1-1",
"1.14.1-2",
"1.14.1-2.1",
"1.14.1-2.1~exp1",
"1.16.1-1",
"1.16.2-1",
"1.17.0-1",
"1.17.0-2",
"1.17.0-3",
"1.19.1-1~exp1",
"1.20.0-1",
"1.20.0-1~exp1",
"1.20.0-3",
"1.20.0-4",
"1.20.0-5",
"1.20.0-6",
"1.21.0-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-28500.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "onnx",
"purl": "pkg:deb/debian/onnx?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"versions": [
"1.17.0-3",
"1.19.1-1~exp1",
"1.20.0-1",
"1.20.0-1~exp1",
"1.20.0-3",
"1.20.0-4",
"1.20.0-5",
"1.20.0-6",
"1.21.0-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-28500.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "onnx",
"purl": "pkg:deb/debian/onnx?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"versions": [
"1.17.0-3",
"1.19.1-1~exp1",
"1.20.0-1",
"1.20.0-1~exp1",
"1.20.0-3",
"1.20.0-4",
"1.20.0-5",
"1.20.0-6",
"1.21.0-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-28500.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #56702 · Revision 1
- Added to Heist Feed
- Publisher date