Is CVE-2026-79720 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-79720 being exploited in the wild.

How severe is CVE-2026-79720?

Medium severity, with a CVSS score of 5, published 27 August 2026.

Which products and versions are affected?

netron (PyPI) ECOSYSTEM:introduced=0,fixed=9.1.3.

Is there a fix for CVE-2026-79720?

Yes. netron (PyPI): upgrade to 9.1.3 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-79720 attacked?

It is attacked with local access.

Am I affected by CVE-2026-79720?

Check whether you run Lutzroeder Netron or netron (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-79720: Netron reflected XSS in desktop application via unsanitized node names

CVE-2026-79720 · Severity: medium · CVSS 5 · Published 2026-08-27

Netron is a popular model viewer application used to visualize neural network and machine learning model architectures. A reflected cross-site scripting vulnerability allows attackers to craft malicious model files that execute arbitrary JavaScript when opened, potentially enabling port scanning of local network services, UI manipulation, and when chained with Chrome/V8 vulnerabilities, remote code execution on the user's system.

Technologies: Lutzroeder Netron, netron (PyPI). Vendors: Lutzroeder, PyPI.

Quick answers

Is CVE-2026-79720 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-79720 being exploited in the wild.
How severe is CVE-2026-79720?: Medium severity, with a CVSS score of 5, published 27 August 2026.
Which products and versions are affected?: netron (PyPI) ECOSYSTEM:introduced=0,fixed=9.1.3.
Is there a fix for CVE-2026-79720?: Yes. netron (PyPI): upgrade to 9.1.3 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-79720 attacked?: It is attacked with local access.
Am I affected by CVE-2026-79720?: Check whether you run Lutzroeder Netron or netron (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

netron (PyPI): upgrade to 9.1.3 or later
```
pip install "netron>=9.1.3"
```

Technical details

Netron contains a DOM-based XSS vulnerability (CWE-79) where user-controlled model fields (node names, input/output descriptions) are directly inserted into innerHTML without HTML escaping. The vulnerability is triggered when a user opens a crafted malicious model file (ONNX or other supported format) and clicks nodes in the sidebar to view details. While Netron implements a Content-Security-Policy blocking inline scripts, the policy lacks frame-src restrictions, allowing attacker-controlled iframes to execute scripts freely. An attacker with network access can deliver malicious model files via phishing or network interception, and the JavaScript context has unrestricted access to local network services and the Electron/Chromium runtime. Patches are available in Netron version 9.1.3 and later.

Affected products

Netron Netron up to and including 9.1.2

Identifiers

CVE-2026-79720
PYSEC-2026-3747

Timeline

2026-08-27: disclosed: Vulnerability disclosed and patched in version 9.1.3
2026-08-27: advisory: CVE-2026-79720 assigned

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.