CVE-2026-118619

Name of the Vulnerable Software and Affected Versions Ultralytics (affected versions not specified)

Description A flaw in the handling of downloads from Google Drive allows remote attackers to execute arbitrary code in the context of the current process. The issue stems from insufficient validation of a user-supplied path before it is used in file operations. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.