CVE-2026-118613

Name of the Vulnerable Software and Affected Versions Ultralytics (affected versions not specified)

Description Remote attackers can execute arbitrary code on affected installations due to improper validation of user-supplied data. This issue occurs within the torch load() function, leading to the deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file, allowing the attacker to execute code in the context of the current user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.