CVE-2026-115921

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ScanInferenceFunction, ScanInferenceFunction_opset8, and ScanInferenceFunction_opset9 do not safely validate the required num_scan_inputs attribute. A missing attribute is dereferenced as a null pointer, while a negative value is converted to size_t and can reach an exceptional oversized allocation path. An untrusted model can therefore terminate or disrupt shape inference, including a negative-value model that can pass onnx.checker.check_model(). This issue is fixed in version 1.22.0.

• CWE-195
• CWE-476

• https://github.com/onnx/onnx/commit/dd6bc92ea39fd2274fd671f0734b0b8b558356f5
• https://github.com/onnx/onnx/pull/7916
• https://github.com/onnx/onnx/releases/tag/v1.22.0
• https://github.com/onnx/onnx/security/advisories/GHSA-m4pr-6v3c-6fgr

Published

Oct 26, 2026

Last Modified

Oct 26, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-115916vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-115917vLLM is an inference and serving engine for large language m…3.4
• CVE-2026-115918vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-115919Open Neural Network Exchange (ONNX) is an open standard for …6.2
• CVE-2026-11592The Email Subscribers & Newsletters – Email Marketing, Post …4.3
• CVE-2026-115920Open Neural Network Exchange (ONNX) is an open standard for …6.2
• CVE-2026-115922Open Neural Network Exchange (ONNX) is an open standard for …6.2
• CVE-2026-115923Backstage is an open framework for building developer portal…6.5
• CVE-2026-115929MongoDB Compass relies on Electron, a third-party runtime th…6.8
• CVE-2026-115930The MongoDB Shell (mongosh) relies on Node.js as a third-par…6.8
• CVE-2026-115931Postiz lets a signed-in user ask the backend to run a functi…9.9
• CVE-2026-115932When a post is published, Postiz treats a media path that is…9.6