CVE Catalog
CVE-2026-79718
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
Reflected XSS in Netron versions up to 9.1.2 in the desktop application through unsanitized node names. An attacker can hide nodes, perform port scanning, or abuse a Chrome n-day to achieve remote code execution.
Risk Assessment
An attacker could gain remote access to the user's system, potentially leading to data theft or full machine compromise.
Recommendation
Update Netron to a version newer than 9.1.2 or avoid opening untrusted model files.
Original NVD description (English source)
Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.