{"data":{"id":"7b489d57-4be5-4776-bb8d-a53f89fec4a6","title":"CVE-2026-11329: A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function…","summary":"CVE-2026-11329 affects onnx onnx-mlir up to 0.5.0.0. The weakness is in the generate_hash_key function in src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py, part of the Placeholder Node Cache Handler component, which uses a weak hash. Exploitation requires local access, has high complexity, and is known to be difficult.","solution":"Apply the patch 72c5187ff6d13c2c2b3d3789b8f5faf99f08a5b4.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-11329","publishedAt":"2026-06-05T13:16:38.343Z","cveId":"CVE-2026-11329","cweIds":["CWE-327","CWE-328"],"cvssScore":"3.6","cvssSeverity":"low","severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["onnx-mlir","torch-onnx-mlir"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"onnx onnx-mlir weak hash in placeholder node cache key generation","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","attackVector":"local","attackComplexity":"high","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00078,"epssCheckedAt":"2026-11-05T06:10:15.115Z","kevDateAdded":null,"advisoryAliases":["GHSA-h7gg-9w38-vh5g"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T00:09:42.149Z","patchAvailable":null,"disclosureDate":"2026-06-05T13:16:38.343Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-20"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}