CVE-2026-11329
Low
Description
A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py of the component Placeholder Node Cache Handler. Such manipulation leads to use of weak hash. An attack has to be approached locally. A high complexity level is associated with this attack. The exploitation is known to be difficult. The name of the patch is 72c5187ff6d13c2c2b3d3789b8f5faf99f08a5b4. Applying a patch is advised to resolve this issue.
SeverityLow
CVSS3.6
Exploit probability—
ProductOnnx-mlir
PublishedJun 5, 2026
First seenJun 5, 2026
Weakness typeCWE-328CWE-328CWE-327CWE-327
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| onnx onnx-mlir | 0.5.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.