TI-2026-82089 CVE-2026-118619 · GHSA-f5fr-fjww-fg7w
Path traversal in Ultralytics Drive downloads enables code execution
Priority MEDIUM 41
Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability.
Vulnerabilities
10 records
TI-2026-82088 CVE-2026-118618 · GHSA-fwfr-jvqv-fqff
Code injection in Ultralytics parse_model allows code execution
Priority LOW 35
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability.
TI-2026-82087 CVE-2026-118617 · GHSA-79w4-wpg3-29fc
Ultralytics deserialization flaw enables remote code execution
Priority LOW 36
Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability.
TI-2026-82086 CVE-2026-118616 · GHSA-qrxf-8r6g-5r64
Code injection in Ultralytics parse_model allows code execution
Priority LOW 35
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability.
TI-2026-82085 CVE-2026-118615 · GHSA-58wj-mqxw-wjfj
Command injection in Ultralytics torch_safe_load allows code execution
Priority LOW 36
Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability.
TI-2026-82084 CVE-2026-118614 · GHSA-jqr9-8ghm-qpc3
Ultralytics check_det_dataset Code Injection Leads to Remote Code Execution
Priority LOW 33
Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability.
TI-2026-82083 CVE-2026-118613 · GHSA-x3v8-q7c3-5f7w
Deserialization flaw in Ultralytics torch_load allows code execution
Priority LOW 34
Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability.
TI-2026-75119 CVE-2026-111237
Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection
Priority LOW 21
A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52.
TI-2021-11748 CVE-2021-31681 · GHSA-4wv7-983f-6869
Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute…
Priority HIGH 69
Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file.
TI-2021-11747 CVE-2021-31680 · GHSA-xqw8-qjqq-x3qg
Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute…
Priority HIGH 69
Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml file.