CVE-2026-79720

CVE-2026-79720 is a reflected cross-site scripting (CWE-79) vulnerability in the desktop application of Netron, Lutz Roeder's open-source tool for visualizing neural network models, affecting versions up to and including 9.1.2. It is triggered when the app renders model node names without sanitization, so an attacker can hide script in a crafted model file that a user opens in the desktop app (a local attack vector requiring user interaction, per the CVSS 4.0 score). Successful exploitation allows the attacker to hide certain nodes in the visualization, perform port scanning from the user's machine, or chain the XSS with a known Chromium n-day to achieve remote code execution. Only users running the affected Netron desktop builds are exposed, as the flaw is scoped to the desktop application. As of the available data, there is one public advisory with PoC reference (HiddenLayer), the flaw is not in CISA KEV, and EPSS is low at 0.2% (8th percentile), indicating no confirmed in-the-wild exploitation.

What to do: Upgrade the Netron desktop application to the latest release (newer than 9.1.2) as referenced in the HiddenLayer advisory. Until patched, avoid opening model files from untrusted sources in the desktop app, or use the web version instead. Check whether users in your environment routinely open third-party model files, as those are the delivery vector for malicious node names.