Live › vulnerability › CVE-2026-111237
Go to dashboardUltralytics FastSAM's AutoBackend model loader evaluates values from model metadata (imgsz, names, kpt_shape) as code without neutralizing them. An attacker who can supply a model file that a user loads could run code on that machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that load FastSAM or Ultralytics AutoBackend model files, especially model files from outside their own trust boundary. The sources describe a local attack, so exposure depends on whether an attacker can get a file loaded on a machine they can reach. Teams that only use models they built and stored themselves are less exposed.
No product ranges from the sources yet.
b4ed20c2fed75eadc5aa7d8b09fedd137b873b52, for example with git log -1 in the checkout.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.get_modelmeta.custom_metadata_map of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. This manipulation of the argument imgsz/names/kpt_shape causes improper neutralization of directives in dynamically evaluated code. The attack requires local access. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-111237")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.