Live › vulnerability › CVE-2026-111991
Go to dashboardThe DetectMultiBackend loader in WongKinYiu yolov9 0.1 parses ONNX model metadata, and manipulating the names or stride values in that metadata leads to code injection. An attacker who gets a crafted ONNX model loaded can run code on the machine that loads it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that load ONNX model files with yolov9's DetectMultiBackend, especially models downloaded or uploaded from outside their control. Systems that only load their own trusted, locally built weights are less exposed, though the sources do not say this removes the risk. Teams not using this repository can skip it.
No product ranges from the sources yet.
yolov9 at 0.1 or runs models/common.py from a checkout of this repositoryDetectMultiBackend and for loading of .onnx files from untrusted sourcesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.init of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-111991")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.