Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9
Exploited now
Ultralytics records in CISA KEVNo Ultralytics vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 69
Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0042 · Published 2023-07-31 · No fix listed CWE-502
Priority HIGH 69
Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0042 · Published 2023-07-31 · No fix listed CWE-502
Priority MEDIUM 41
Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00535 · Published 2026-10-28 · No fix listed CWE-22
Priority LOW 36
Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00264 · Published 2026-10-28 · No fix listed CWE-502
Priority LOW 36
Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00412 · Published 2026-10-28 · No fix listed CWE-78
Priority LOW 35
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00221 · Published 2026-10-28 · No fix listed CWE-94
Priority LOW 35
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00202 · Published 2026-10-28 · No fix listed CWE-94
Priority LOW 34
Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00241 · Published 2026-10-28 · No fix listed CWE-502
Priority LOW 33
Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00202 · Published 2026-10-28 · No fix listed CWE-94
Priority LOW 21
A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2026-10-16 · No fix listed CWE-94
THREATIST.IORead the docs