Executive brief
Netron is a viewer application for machine learning model files. An attacker can craft a malicious model file that injects arbitrary HTML and JavaScript into the application's sidebar when displayed. In the desktop version, this allows attackers to make unrestricted requests to local services or chain the vulnerability with browser exploits to achieve complete system compromise.
Technical details
Netron contains a reflected cross-site scripting (XSS) vulnerability caused by rendering user-controlled model fields (node names, input/output descriptions) directly into the DOM via innerHTML without HTML escaping. The vulnerability is triggered when a user opens a crafted model file and clicks on a node, which populates the sidebar. While the application implements a Content Security Policy (CSP) blocking inline scripts, it does not restrict iframe framing, allowing attackers to bypass restrictions. In the Electron-based desktop application (shipping Chrome 148), this XSS can be chained with known V8 vulnerabilities to achieve remote code execution. The vulnerability affects all versions up to and including 9.1.2; a patch was released in version 9.1.3.
Affected products
- Lutz Roeder Netron <=9.1.2
Timeline
- 2026-08-27: disclosed
- 2026-08-27: patched: Fixed in version 9.1.3