CVE-2026-118617

Name of the Vulnerable Software and Affected Versions Ultralytics (affected versions not specified)

Description Remote attackers can execute arbitrary code on affected installations due to the deserialization of untrusted data. This issue occurs within the load dataset cache file() function because user-supplied data is not properly validated. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file, allowing the attacker to execute code in the context of the current user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.