Live › vulnerability › CVE-2026-118616
Go to dashboardThe parse_model function in Ultralytics runs a user-supplied string as Python code without validating it. An attacker who gets a victim to open a malicious file or visit a malicious page can run code as that user.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
Teams that load model configurations or other user-supplied input through Ultralytics' parse_model path could be exposed, since the flaw is in how that input is turned into executed code. The sources do not say which versions or deployment patterns are affected, so unknown whether systems that only load trusted local models are exempt.
No product ranges from the sources yet.
pip show ultralytics to read the installed version; the sources do not list affected versions, so unknown whether a given version is vulnerable.Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parse_model function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-30123.
This page as .md · .json · in your agent: get_signal("CVE-2026-118616")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.